requesting-code-review

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes local git commands (git rev-parse, git log, git diff) to retrieve repository history and code changes. These commands are executed within the user's local environment to provide context for the review agent.\n- [SAFE]: No sensitive data access, hardcoded credentials, or external network requests were found. The skill operates entirely on local source code and git metadata.\n- [SAFE]: The skill uses a structured template (code-reviewer.md) for the analysis agent, which provides clear checklists for code quality, architecture, and testing, reducing the risk of straying from the intended task.\n- [SAFE]: While the agent processes untrusted code changes via git diff (an indirect prompt injection surface), the focus on production readiness and structured feedback mitigates risks. Mandatory evidence: 1. Ingestion at code-reviewer.md via git diff; 2. Boundary markers are absent; 3. Capability inventory includes local git operations; 4. No specific sanitization of code content is performed.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 09:55 AM
Security Audit — agent-trust-hub — requesting-code-review