caveman-review
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, untrusted data (pull request diffs and comments) and subsequently perform file-write operations to a local wiki repository.
- Ingestion points: Pull request diffs, code content, and user instructions triggering the review.
- Boundary markers: Absent. The skill does not provide instructions to the agent to ignore or delimit instructions that might be embedded within the code being reviewed.
- Capability inventory: File-writing capabilities to the
llmwiki/wiki/directory, including appending to index and log files. - Sanitization: Absent. There are no instructions to escape, validate, or sanitize content extracted from the code diffs before interpolating them into the wiki draft files.
Audit Metadata