code-review
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a comprehensive code review process using local commands (
git diff) and external tool calls (mcp__x__ask_codex). These operations are consistent with the skill's stated purpose of reviewing code changes. - [SAFE]: The skill includes a dedicated security checklist for the delegated agent (covering OWASP Top 10, input sanitization, and injection prevention), which represents a positive security-first design.
- [SAFE]: While the skill processes untrusted data in the form of code changes (creating an indirect prompt injection surface), this is inherent to its functional role as a code review tool, and no malicious exploitation patterns were found.
Audit Metadata