code-reviewer

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted code from a repository. This creates a surface where instructions hidden within code comments or string literals could attempt to influence the agent's analysis or output.
  • Ingestion points: Local source files identified through the git diff command in SKILL.md.
  • Boundary markers: None explicitly defined to separate untrusted code from the analysis instructions.
  • Capability inventory: Employs Bash, Read, Grep, and Glob tools to inspect and process the codebase.
  • Sanitization: No specific filtering or escaping is applied to the analyzed content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 07:31 AM