error-debugging-multi-agent-review
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external code artifacts, including entire Git repositories and files, which may contain malicious instructions meant to influence the agent's review logic.
- Ingestion points: The
$ARGUMENTSparameter accepts file paths, Git repositories, and code snippets from the project context. - Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat the code content as untrusted data or to ignore instructions embedded within the code comments or strings.
- Capability inventory: The skill describes logic for agent routing and execution, but the provided scripts are conceptual Python snippets and do not execute shell commands or write to the filesystem directly.
- Sanitization: There is no evidence of input validation or sanitization of the content fetched from the provided Git repositories or file paths.
Audit Metadata