code-review-checklist
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell scripts (
scripts/check-complexity.sh,scripts/pre-review-check.sh, andscripts/run-linters.sh) that utilize standard system utilities likefind,grep,awk, andsedto analyze codebase metrics and patterns. These scripts use proper quoting for the target path variable to mitigate potential command injection risks. - [EXTERNAL_DOWNLOADS]: The
scripts/run-linters.shscript usesnpxto execute common development tools such as ESLint, Prettier, and the TypeScript compiler. This process may involve downloading packages from the official npm registry if they are not available in the local environment. - [DATA_EXPOSURE]: The
scripts/pre-review-check.shscript performs automated scans for hardcoded development, staging, or localhost URLs within the source code to prevent the accidental exposure of internal infrastructure details in production environments. - [SAFE]: Analysis of the skill's instructions and scripts reveals no malicious patterns, prompt injections, or unauthorized data exfiltration mechanisms. The logic follows established software development practices for code auditing and quality assurance.
Audit Metadata