java-python-code-reviewer
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Prompt Injection] (SAFE): The instructions are focused on code review tasks and do not contain patterns intended to bypass AI safety filters or override system instructions.
- [Data Exposure & Exfiltration] (SAFE): No hardcoded credentials or sensitive file paths were identified. The allowed tools (Read, Glob, Grep, LSP) are appropriate for the stated purpose of code review.
- [Obfuscation] (SAFE): No encoded strings, zero-width characters, or homoglyph-based evasion techniques were found.
- [Unverifiable Dependencies & Remote Code Execution] (SAFE): The skill does not download external scripts or install packages. It operates solely through instructional prompts and local code analysis tools.
- [Indirect Prompt Injection] (LOW):
- Ingestion points: Reads files from
leetcode_java/,leetcode_python/,algorithm/, anddata_structure/folders. - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Uses read-only tools (Read, Glob, Grep, LSP). No write or network capabilities are requested.
- Sanitization: Not applicable as the skill only provides feedback and doesn't execute the code it reviews.
- [Dynamic Execution] (SAFE): There are no instructions for runtime compilation or execution of the code being reviewed; the agent's role is limited to providing feedback.
Audit Metadata