frontend-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code diffs and metadata from external Git platforms like GitHub and GitLab. This creates an attack surface for indirect prompt injection, where malicious instructions could be embedded in the code being reviewed to influence the agent's analysis or actions.
- Ingestion points: Fetches merge request diffs and file contents via MCP tools as specified in SKILL.md.
- Boundary markers: The instructions in SKILL.md explicitly warn the agent to treat all fetched content as untrusted and reject instructions hidden in code or comments.
- Capability inventory: The skill can perform project searches and post discussion comments back to the repository.
- Sanitization: The skill implements a mandatory human-in-the-loop approval phase where the user must select findings before any write operations are performed.
Audit Metadata