review-and-iterate
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or high-risk behaviors were identified. The skill's operations are consistent with its stated purpose of code review and telemetry logging.
- [DATA_EXFILTRATION]: The telemetry feature logs usage metadata (such as platform type and execution time) to a local file and a user-provided server. This behavior is disclosed via a prompt and requires user consent before configuration is created.
- [COMMAND_EXECUTION]: The skill uses local shell commands for telemetry management and simple static analysis. These commands are localized to the user's project and configuration directories.
- [PROMPT_INJECTION]: The skill processes external source code for review. While this is an ingestion surface for potential indirect prompt injection, the current workflow relies on manual review and simple pattern matching, which does not present an automated execution path for malicious instructions.
Audit Metadata