skills/pv-udpv/pplx-sdk/code-review/Gen Agent Trust Hub

code-review

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • Prompt Injection (SAFE): No instructions attempting to bypass safety filters or override agent behavior were detected. The instructions are focused on coding standards and architectural rules.
  • Data Exposure & Exfiltration (SAFE): No hardcoded credentials, sensitive file paths, or network exfiltration patterns were found.
  • Unverifiable Dependencies & Remote Code Execution (SAFE): The skill contains no scripts, package files, or remote download commands.
  • Indirect Prompt Injection (LOW): The skill is designed to process untrusted data (code changes).
  • Ingestion points: Processes pull requests and code changes.
  • Boundary markers: None explicitly defined in the prompt.
  • Capability inventory: None. The skill has no associated scripts or tools to execute commands or write files.
  • Sanitization: Not applicable as no actions are taken beyond text generation.
  • Dynamic Execution (SAFE): There is no code generation, runtime compilation, or unsafe deserialization present.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:04 PM