review-elixir
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands including
git diffto identify changes,grepfor technology detection, andmixfor formatting, linting, and testing. These are standard operations for a development-focused code review agent.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted source code during the review process.\n - Ingestion points: Elixir source files (
.ex,.exs,.heex) identified viagit diffandgrep(SKILL.md).\n - Boundary markers: Absent; the skill does not use specific delimiters or instructions to ignore prompts embedded in the code files.\n
- Capability inventory: The skill can execute shell commands (
mix), load additional skills, and spawn subagents via theTasktool (SKILL.md).\n - Sanitization: No validation or escaping of code content is performed before processing.
Audit Metadata