quality-reviewer
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to run local scripts which execute development commands includingnpx eslint,npm run lint, andnpm run type-checkfor code validation purposes. - [PROMPT_INJECTION]: The skill processes user-controlled source code from the
frontend/srcdirectory, which establishes an indirect prompt injection surface. - Ingestion points: The scripts
check-file-size.sh,check-naming.sh, andcheck-imports.shusefindandgrepto read the contents of code files. - Boundary markers: There are no specific delimiters or system instructions used to separate the analyzed code content from the agent's instructions.
- Capability inventory: The agent has access to
Bash,Read,Grep, andGlobtools, and executes standard project commands via the shell. - Sanitization: Analyzed code content is read and processed without filtering or sanitization before being presented in the agent's context.
Audit Metadata