react-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted source code, creating a potential surface for indirect prompt injection where instructions embedded in the analyzed code could influence agent behavior.
- Ingestion points: The skill uses
globandgrepto identify and read React components and hooks within the project environment (SKILL.md). - Boundary markers: There are no explicit instructions or delimiters defined to separate untrusted code content from agent instructions.
- Capability inventory: The skill is granted
Read,Edit,Grep,Glob, andBashcapabilities (SKILL.md). - Sanitization: The instructions do not specify any validation or sanitization steps for the data read from project files before it is processed by the LLM.
Audit Metadata