full-code-review
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill implements strong defenses against indirect prompt injection. It includes explicit instructions to its sub-agents to ignore any commands or instructions embedded within the reviewed code, diffs, or PR metadata.
- Ingestion points: Diff content and PR metadata fetched via
gitandgh(SKILL.md). - Boundary markers: Present; the script explicitly labels diffs as "untrusted input" and warns agents to ignore embedded instructions (scripts/full-code-review.js).
- Capability inventory: Limited to
gitandghCLI tools (SKILL.md). - Sanitization: Implements a
redactSensitiveTextfunction to mask secrets like API keys, tokens, and passwords before they are processed by LLM agents (scripts/full-code-review.js). - [CREDENTIALS_UNSAFE]: No hardcoded credentials found. The skill actively identifies and redacts secret-like patterns in the data it processes, which is a significant security best practice for code analysis tools.
- [COMMAND_EXECUTION]: Tool usage is strictly limited to
gitandghfor repository context gathering. This is appropriate for a code review skill and no suspicious shell patterns or argument injections were detected.
Audit Metadata