code-review
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and analyzes untrusted code files provided by the user, which creates a surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: The skill reads files from paths provided in
$ARGUMENTSor searched for in directories like~/Dropbox/Github/as seen in Step 0 of the instructions. - Boundary markers: The instructions do not define clear delimiters or include warnings to the agent to ignore instructions embedded within the code comments or strings of the files being reviewed.
- Capability inventory: The skill possesses the capability to read files from the filesystem and write report files (
review_*.md) or 'fixed' code files back to the disk. - Sanitization: There is no evidence of content sanitization, filtering, or validation performed on the scripts before they are processed by the agent.
Audit Metadata