meta-reviewing-reviewing
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of instructional markdown files and metadata. No executable scripts, subprocess calls, or network exfiltration patterns were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data in the form of code diffs and pull request descriptions. This represents a vulnerability surface where instructions embedded in the reviewed code could attempt to influence the agent. 1. Ingestion points: PR descriptions and changed files (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Writing review comments and setting PR approval status. 4. Sanitization: Absent.
Audit Metadata