code-review-and-quality
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional markdown content designed to guide an AI agent through a code review process. It does not include executable scripts, network requests, or file system modifications.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external code and pull request descriptions. While this creates an ingestion point for untrusted data, the skill itself does not utilize any dangerous tools or system-level capabilities that would allow an indirect prompt injection to escalate into an attack. The instructions include defensive measures, such as treating data from external sources as untrusted.
- [DATA_EXPOSURE]: The skill explicitly instructs the agent to check for hardcoded secrets, API keys, and sensitive data as part of its 'Security' axis review, which is a standard defensive security practice.
Audit Metadata