security-review
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and procedural guide for performing security audits. It includes standard shell commands for code searching (grep) and dependency auditing (pnpm audit, pip-audit) which are appropriate for its stated purpose.
- [SAFE]: The 'allowed-tools' section correctly restricts the agent to file reading and GitHub management tools necessary for reviewing pull requests.
- [SAFE]: Examples of vulnerable code are clearly labeled as such for educational purposes and are followed by secure coding patterns.
- [SAFE]: The use of shell commands to search for hardcoded secrets or list changed files is a standard security practice and does not involve exfiltration of data to unauthorized domains.
Audit Metadata