Gen Agent Trust Hub

thermo-nuclear-code-quality-review · michael-denyer/pstack-claude

Passed

Provider summary

The skill is a code review automation tool that processes external source code. It is susceptible to indirect prompt injection because it analyzes untrusted code changes without clear boundary markers or sanitization, potentially allowing embedded instructions in the code to influence the agent. It also writes review artifacts to the local file system.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.

Interpretation

Compare the repository, publisher, and installation command before continuing.

Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.

Use the narrowest possible scope and avoid broad credentials for third-party skills.