coding-review-simplify
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process code diffs and task contracts, which are untrusted external inputs. An attacker could embed malicious instructions within these diffs to attempt to control the agent's behavior.
- Ingestion points: SKILL.md (Workflow Step 1) directs the agent to read changed files, diffs, and task acceptance contracts.
- Capability inventory: The agent has access to powerful tools including Bash, Edit, Read, and Grep across its workflow.
- Boundary markers: The instructions lack explicit delimiters or specific warnings to treat ingested diff content strictly as data, which may lead the agent to follow instructions embedded within the code it is reviewing.
- Sanitization: There are no steps defined to sanitize or filter the content of the ingested files before they are processed by the agent.
Audit Metadata