reviewing-code-changes
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data from git diffs and pull request descriptions, which creates a surface for indirect prompt injection attacks. \n
- Ingestion points: Source code files, pull request metadata, and git diff output. \n
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used during data processing. \n
- Capability inventory: The skill uses git and ripgrep for data reading and generates markdown reports. \n
- Sanitization: External content is processed without prior filtering or sanitization. \n- [COMMAND_EXECUTION]: The skill instructs the agent to run local CLI tools like git and ripgrep for repository analysis. These commands are used for read-only operations and do not involve high-privilege sinks or external network exfiltration.
Audit Metadata