miro-code-review
Pass
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): The skill consists entirely of Markdown documentation intended for human or AI reference during code reviews. It provides conceptual frameworks for risk assessment and visualization.
- [Data Exposure] (SAFE): While the skill mentions sensitive file paths (e.g.,
.env,secrets/) and displays a dummy API key (sk_live_abc123), these are used exclusively as educational examples of security anti-patterns to identify during reviews. No actual data access or exfiltration occurs. - [Command Execution] (SAFE): The documentation includes code snippets for
exec()and SQL queries to illustrate injection vulnerabilities and their fixes. These are static text examples and are not executed by the skill.
Audit Metadata