review-solid
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
git diffandgit symbolic-refto identify changed files for review. These are standard repository inspection commands and do not involve high-risk flags or external network activity. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes code and diffs provided by the user or repository, which are external untrusted inputs. Ingestion points: Source code files and git diff output identified in SKILL.md. Boundary markers: The skill enforces an 'evidence-gated' 3-step process, requiring the agent to cite specific code signals before a finding is reported, which mitigates obedience to embedded instructions. Capability inventory: Analysis and reporting only; no file-write or network capabilities are utilized in the logic. Sanitization: Findings are constrained to a predefined list of architectural 'Strong' and 'Weak' signals.
Audit Metadata