receiving-code-review
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
grepto verify the usage of specific features within the local codebase, which is a standard operation for technical evaluation. - [COMMAND_EXECUTION]: The skill references the use of the GitHub CLI (
gh api) to interact with pull request comment threads, which is appropriate for managing code review responses. - [PROMPT_INJECTION]: The skill is designed to process untrusted external data (code review feedback). It explicitly mitigates indirect prompt injection risks by instructing the agent to treat external feedback as suggestions requiring technical verification rather than authoritative commands.
Audit Metadata