requesting-code-review
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes standard Git commands (
git rev-parse,git log,git diff) to identify code changes between specific commits. These operations are performed locally and are restricted to the repository context. - [COMMAND_EXECUTION]: The instructions involve executing Git commands to retrieve commit SHAs and file diffs. This is a standard and safe use of shell tools to provide context for the code review process.
- [INDIRECT_PROMPT_INJECTION]: The code reviewer subagent processes raw code changes provided via
git diff. This represents an ingestion point where malicious code committed to the repository could attempt to influence the subagent's logic. However, since the subagent is designed specifically to analyze and report on this code, and its output is limited to a textual review, the risk is negligible and inherent to the tool's primary purpose.
Audit Metadata