caveman-review

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill defines formatting rules for code reviews and does not include scripts, remote downloads, or sensitive data access patterns.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it is designed to process external code diffs.
  • Ingestion points: Processes pull request diffs and descriptions as indicated in the SKILL.md instructions.
  • Boundary markers: Absent; the skill does not define specific delimiters to isolate untrusted code diffs from agent instructions.
  • Capability inventory: No high-risk capabilities (subprocesses, file writes, or network access) are present; the skill is limited to generating text output.
  • Sanitization: No sanitization or validation of the input code is specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 06:23 AM