The Agent Skills Directory

[SAFE]: No malicious patterns, data exfiltration attempts, or unauthorized command executions were found in the skill instructions or configuration.
[COMMAND_EXECUTION]: The skill workflow involves inspecting git status and code diffs. These operations are restricted to the local repository context and are necessary for the skill's primary function of reviewing code changes.
[PROMPT_INJECTION]: The skill processes untrusted input in the form of code diffs and files provided by the user. While this creates a surface for indirect prompt injection (e.g., via malicious comments in the code), the skill lacks risky capabilities such as network access or arbitrary code execution, effectively mitigating the risk. Evidence Chain: 1. Ingestion points: git status and diffs (SKILL.md); 2. Boundary markers: Absent; 3. Capability inventory: No subprocess calls, exec/eval, file-write, or network operations; 4. Sanitization: Absent.

code-review