recipe-front-review
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard git commands like git symbolic-ref and git diff to identify changed files and branch context, which is necessary for its functional goal of auditing implementation against design documentation.
- [DATA_EXFILTRATION]: Access is requested for local project design documents and source code for the purpose of compliance review. No patterns were detected indicating network exfiltration to external domains or unauthorized access to sensitive user credentials like SSH keys or environment secrets.
- [PROMPT_INJECTION]: The skill implements a robust orchestration flow with explicit 'STOP -- BLOCKING' gates. This design prevents the agent from proceeding with fixes or updates without direct user approval, mitigating risks associated with autonomous or unintended instructions.
- [REMOTE_CODE_EXECUTION]: While the skill involves sub-agents that can modify code, these operations are strictly confined to local file changes, require human approval for every route, and must pass mandatory quality gate checks before completion.
Audit Metadata