requesting-code-review
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses standard git commands (rev-parse, diff, log) to gather metadata and content for code review. These operations are essential for the skill's functionality and do not include dangerous arguments.
- [DATA_EXPOSURE]: Accesses local git repository history and source code diffs. This data is processed locally by the sub-agent to generate a review report, with no evidence of exfiltration to external domains.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of git diffs and implementation descriptions. While there are no explicit boundary markers or sanitization processes mentioned, the reviewing sub-agent's instructions are limited to generating a text-based assessment, which significantly reduces the risk of malicious instructions affecting the system.
Audit Metadata