hunk-review
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various
hunkCLI commands to manage review sessions, navigate code, and manage comments. Thereloadcommand allows swapping session contents by executing nested Hunk subcommands such asdiffandshow. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from diffs and comments, creating an attack surface for indirect prompt injection.
- Ingestion points: The skill reads patch content via
hunk session reviewand user comments viahunk session comment list(SKILL.md). - Boundary markers: There are no delimiters or instructions to ignore embedded commands within the ingested content.
- Capability inventory: The agent can execute CLI commands, navigate the filesystem via paths, and modify session state through comment management.
- Sanitization: No sanitization or validation logic is defined for the content retrieved from external sources before agent processing.
Audit Metadata