code-review

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a comprehensive code review process using local commands (git diff) and external tool calls (mcp__x__ask_codex). These operations are consistent with the skill's stated purpose of reviewing code changes.
  • [SAFE]: The skill includes a dedicated security checklist for the delegated agent (covering OWASP Top 10, input sanitization, and injection prevention), which represents a positive security-first design.
  • [SAFE]: While the skill processes untrusted data in the form of code changes (creating an indirect prompt injection surface), this is inherent to its functional role as a code review tool, and no malicious exploitation patterns were found.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 03:59 AM