human-review
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected. The skill implements defensive measures by instructing the agent to redact credentials and personal information before generating review materials.\n- [DATA_EXFILTRATION]: The instructions explicitly forbid the inclusion of secrets and personal data in the final output, mitigating data exposure risks during the review process.\n- [PROMPT_INJECTION]: The skill processes untrusted repository content (diffs, requirements) for inclusion in the generated HTML. While this presents an indirect prompt injection surface, the risk is addressed through the requirement for human verification and the isolation of the generated files from the main project source.\n
- Ingestion points: Repository request, instructions, diffs, and specifications (
SKILL.md).\n - Boundary markers: Instructions specify accounting for every change and assigning a disposition; explicit "redact secrets" command provided.\n
- Capability inventory: File system writes for artifact generation and shell command execution for local serving/headless browser verification.\n
- Sanitization: Secret redaction is mandated; no explicit HTML escaping is defined for the interpolated content.\n- [COMMAND_EXECUTION]: The agent uses local shell commands to serve the review artifact on loopback or verify it via a headless browser. These actions are limited to local-file navigation and are necessary for the skill's primary function of artifact verification.
Audit Metadata