code-reviewer
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted source code, providing a vector for instructions embedded in the code to influence the agent's behavior.
- Ingestion points: Source code content is ingested using the Read, Grep, and Glob tools defined in the workflow.
- Boundary markers: The instructions do not use delimiters or provide specific warnings to the AI to ignore instructions found within the analyzed files.
- Capability inventory: The skill is restricted to file system reading via the allowed-tools configuration, which prevents system modification but allows for the generation of biased or misleading review reports.
- Sanitization: There is no evidence of content filtering or sanitization to mitigate embedded commands in the input data.
Audit Metadata