resolve-review-comments
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests and processes untrusted data from external sources.
- Ingestion points: Review comment text is fetched from GitHub and GitLab APIs in
SKILL.mdStep 2 ('Fetch Unresolved Comments'). - Boundary markers: The skill implements a 'Triage Gate' in Step 3 which requires the agent to classify comments; however, it only explicitly mandates user intervention for 'Skip' or 'Clarify' decisions, potentially allowing 'Implement' decisions on malicious instructions to proceed without direct oversight.
- Capability inventory: The agent possesses the capability to modify source code (Step 4), perform git operations including commits and pushes (Step 6 and 7), and modify PR/MR metadata (Step 8).
- Sanitization: There is no evidence of technical sanitization or escaping of the comment text before it is processed by the LLM for code implementation logic.
Audit Metadata