review-pr
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted pull request content and user input without utilizing boundary markers, presenting a surface for indirect prompt injection.\n
- Ingestion points: Code diffs from git commands and the $ARGUMENTS placeholder in SKILL.md.\n
- Boundary markers: Absent; there are no delimiters (e.g., XML tags or triple quotes) used to separate analyzed code from instructions.\n
- Capability inventory: The skill has the ability to execute shell commands via the Bash tool.\n
- Sanitization: No input validation or filtering is performed on the data ingested from the repository.
Audit Metadata