critique
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- Prompt Injection Pattern: The skill contains an instruction for the agent to "override your default rule against staging changes." This is a pattern used to bypass an agent's standard operational constraints. In this context, it is used to allow the agent to use
git addto stage the fixes it creates, which is a core part of its intended code-auditing functionality. - Indirect Prompt Injection Surface: The skill is designed to process and audit external code in the form of staged files. This creates a surface where malicious instructions embedded in that code could potentially influence the agent's behavior during the critique process. The skill includes specific requirements (Requirement 13) to scan for such payloads, which helps manage this risk.
- Command Execution: The skill relies on the agent's ability to execute shell commands such as
git diffandgit addto perform its tasks. While these are standard tools for repository management and software development workflows, they represent a capability that should be used with appropriate oversight.
Audit Metadata