synthesis-code-audit
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a public GitHub repository ('github.com/synthesisengineering/synthesis-skills') as its source. This is a standard reference to the author's public codebase.
- [SECURITY_DIMENSION]: The skill explicitly includes a security audit dimension as part of its core functionality, instructing the agent to check for authentication, injection vectors (SQLi, XSS, command injection), input validation, and hardcoded secrets.
- [DATA_INGESTION]: The skill processes untrusted input in the form of code diffs and reviewer comments for analysis. It operates in a read-only capacity for these inputs, focusing on generating reports rather than executing code or performing network operations.
- [PRINCIPLES]: The instructions emphasize reading files in full context rather than just hunks, which is an engineering best practice for identifying logical errors that might be obscured in a minimal diff view.
Audit Metadata