code-review
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data in the form of code diffs, patches, and pull requests. This represents a surface for indirect prompt injection where malicious instructions could be embedded in the code being reviewed.
- Ingestion points: The skill reads external content via
git diff,git diff --staged, or user-provided patches. - Boundary markers: No specific boundary markers or "ignore instructions" delimiters are enforced in the prompt structure for the ingested code.
- Capability inventory: The skill uses standard git commands to read repository state.
- Sanitization: No explicit sanitization of the input code is performed by the skill itself, relying on the underlying LLM's safety filters.
Audit Metadata