code-review-checklist

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of markdown-based instructional content and checklists. It does not include any executable scripts, shell commands, or tool definitions.
  • [CREDENTIALS_UNSAFE]: The document contains a hardcoded API key string (sk_live_abc123xyz) within a code block explicitly labeled as a 'Bad' example. This is a non-functional placeholder used for educational purposes to demonstrate insecure coding practices that should be caught during a review. The skill correctly advocates for the use of environment variables for secret management.
  • [EXTERNAL_DOWNLOADS]: The skill references several external documentation resources and industry guidelines (e.g., Google's Engineering Practices, OWASP Top 10, Thoughtbot guides). These are well-known, reputable sources for software development standards and do not involve the download or execution of untrusted code.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 03:41 PM