differential-review
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to run git commands,grep, andfindfor repository analysis. These commands are used to identify code changes, analyze history, and calculate the blast radius of modifications. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection because it processes untrusted code changes from commits and pull requests. 1. Ingestion points: Data enters the context via
git diffandgh pr viewoutput inSKILL.mdandmethodology.md. 2. Boundary markers: The skill does not implement specific delimiters to isolate untrusted code content from agent instructions. 3. Capability inventory: The agent has access toBashfor command execution and theWritetool for generating reports. 4. Sanitization: There is no explicit logic to sanitize or escape data retrieved from git history before it is processed by the agent.
Audit Metadata