generic-react-code-reviewer
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external React and TypeScript code, which introduces a vulnerability surface where malicious instructions could be embedded in the code being reviewed to influence agent behavior. \n
- Ingestion points: React/TypeScript source code provided as input for review (SKILL.md). \n
- Boundary markers: No specific delimiters or safety warnings for separating code from instructions are defined. \n
- Capability inventory: The skill does not define or use high-risk capabilities like file system writing or network operations. \n
- Sanitization: The instructions do not include steps for sanitizing or validating the untrusted code content before processing.
Audit Metadata