skills/theangrypit/theangryskills/cursor-thermos-thermo-nuclear-code-quality-review/Gen Agent Trust Hub
cursor-thermos-thermo-nuclear-code-quality-review
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external code changes ("current branch's changes"), which creates an attack surface for instructions embedded in code comments or data within the codebase being reviewed.
- Ingestion points: The agent is instructed to read and analyze code from the current branch as part of the audit process defined in SKILL.md.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to treat the code being reviewed as untrusted data or to ignore embedded instructions.
- Capability inventory: The skill relies on default agent capabilities for file reading and reasoning; no high-privilege tools or network-active tools are requested.
- Sanitization: There is no mechanism described for sanitizing or filtering the content of the files being reviewed before they are processed by the agent.
Audit Metadata