gsd-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requests the
Bashtool and parses user-provided command-line arguments. While these are used to control the code review workflow (depth, files, fix modes), shell access represents a broad capability. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface because its primary purpose is to read and analyze untrusted external data (source code files).
- Ingestion points: Source files changed during a project phase or explicitly provided via the
--filesargument (identified in SKILL.md). - Boundary markers: The skill does not define explicit delimiters or instructions to the sub-agent to ignore potential prompt injection attempts embedded in comments or strings within the code being reviewed.
- Capability inventory: The skill and its spawned agent have access to the
Bash,Write, andAgenttools, which could be abused if an injection is successful. - Sanitization: No explicit sanitization or filtering of the source code content is described in the dispatch logic.
Audit Metadata