receiving-code-review
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes feedback from external reviewers which may contain adversarial instructions designed to influence agent behavior.
- Ingestion points: Processes feedback from "External Reviewers" and GitHub PR comments as described in SKILL.md.
- Boundary markers: No delimiters or instructions to disregard embedded commands are specified for handling external feedback.
- Capability inventory: The skill instructions involve using
grepfor codebase searching and thegh apifor interacting with GitHub pull request comments. - Sanitization: There are no explicit validation or sanitization steps mentioned for the ingested feedback before it is processed by the agent.
Audit Metadata