roborev
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on executing various commands via the
roborevCLI to perform its primary functions, includingroborev init,roborev install-hook,roborev review, androborev daemon. These commands modify the local environment by installing git hooks and running background processes as part of the intended code review workflow. - [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface where it processes 'findings' generated by external AI agents (Claude, Copilot, Codex) via
roborev show. - Ingestion points: Findings output from
roborev showand project-specific.roborev.tomlguidelines. - Boundary markers: None explicitly defined in the instructions to delimit finding descriptions from agent instructions.
- Capability inventory: The agent can modify the codebase (
Fixaction), perform further investigations (Discuss), and execute CLI commands. - Sanitization: No specific sanitization or validation of the external finding content is mentioned. While this creates a theoretical surface for indirect injection, it is inherent to the tool's purpose of acting on external review data.
Audit Metadata