scrutinize
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external, potentially untrusted content such as pull requests, code changes, and design documents. This creates a surface where malicious instructions embedded in the analyzed artifacts could influence the agent's behavior during the review process.
- Ingestion points: Artifacts provided by the user for review (PRs, code, design docs) as described in the Activation Triggers section of
SKILL.md. - Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded prompts within the content being scrutinized.
- Capability inventory: The skill utilizes
Read,Bash, andGreptools (defined inallowed-tools) to trace execution paths and verify claims, which provides a mechanism for the agent to interact with the codebase and local environment. - Sanitization: There are no specific instructions for sanitizing or escaping the content of the analyzed artifacts before processing.
Audit Metadata