ork-review-pr
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill has an inherent surface for indirect prompt injection as it is designed to ingest and interpret external, untrusted data from pull request diffs and repository files.
- Ingestion points: Pull request diffs and repository context (SKILL.md).
- Boundary markers: The skill does not define specific delimiters to separate untrusted diff content from the agent's core instructions.
- Capability inventory: The skill utilizes read-only repository access; it explicitly forbids file modification, approval, or merging.
- Sanitization: There is no evidence of sanitization or filtering for the external code content being reviewed.
Audit Metadata