review-post-task
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
git diffandgrepto examine source code changes and search for patterns across the codebase as part of its review protocol. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection as it processes untrusted data from the repository being reviewed, such as file contents and documentation.
- Ingestion points: Reads local project files, documentation in
docs/project-reference/, andgit diffoutput. - Boundary markers: The skill does not define explicit boundary markers or instructions to the agent to ignore embedded commands within the files being reviewed.
- Capability inventory: The agent has the capability to read/write files, execute shell commands (git, grep), and invoke sub-agents for complex tasks.
- Sanitization: There is no evidence of input sanitization or validation of the processed file content before it is presented to the agent.
Audit Metadata