rc-code-review
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Language-Specific Security Guides: The reference files (e.g., security-review-guide.md, react.md, django.md) provide accurate guidance for preventing common vulnerabilities like SQL injection and XSS through proper coding patterns.
- [SAFE]: Benign PR Analysis Utility: The 'scripts/pr-analyzer.py' script is a passive text-parsing tool that calculates PR complexity metrics without executing shell commands or performing network operations.
- [SAFE]: Indirect Prompt Injection Risk Assessment: The skill ingests untrusted PR data (Ingestion: scripts/pr-analyzer.py and SKILL.md) and has access to powerful capabilities (Capability inventory: Bash, WebFetch, Read, Grep, Glob). However, the PR analyzer script uses standard git diff markers (Boundary markers: +, -, diff --git) to delineate content and performs only statistical pattern matching (Sanitization: No execution or evaluation of untrusted input).
Audit Metadata