receiving-code-review
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a robust framework for technical evaluation of external input, prioritizing codebase reality over social compliance.
- [PROMPT_INJECTION]: The skill manages an indirect prompt injection surface (external code reviews) by mandating technical verification and skepticism. (Ingestion: PR comments and review feedback; Boundaries: None; Capabilities: grep, gh api, code modification; Sanitization: Verification against existing codebase reality and technical logic).
- [COMMAND_EXECUTION]: The skill references standard utilities like
grepandgh apifor expected development workflows, such as codebase inspection and responding to GitHub pull request comments.
Audit Metadata