generic-static-code-reviewer
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing quality standards and checklists for manual or automated code review of static websites.
- [COMMAND_EXECUTION]: The skill mentions local testing commands such as
python -m http.serverandnpx serve .. These are standard, well-known tools for local development and do not represent a security risk in this context. - [INDIRECT_PROMPT_INJECTION]: While the skill's purpose is to process and review code (untrusted data), it does not define any automated execution capabilities or tools that would be vulnerable to exploitation via indirect injection. It acts purely as a set of evaluation criteria.
Audit Metadata