test-changes
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands for infrastructure lifecycle management using
terraformand version control operations viagit. - [COMMAND_EXECUTION]: Invokes third-party CLI tools
codexandgeminito perform automated analysis on local project files. - [DATA_EXFILTRATION]: Transmits local repository data and version control diffs to well-known external AI service providers for review purposes.
- [PROMPT_INJECTION]: The skill processes untrusted input from local code files and git history, which is subsequently provided as context to other AI models, presenting an indirect prompt injection risk.
- Ingestion points:
git diffoutput and local Terraform configuration files (.tf) located in vendor-specific paths. - Boundary markers: Absent; code content is interpolated directly into command strings for AI tools without delimiters or instructions to ignore embedded commands.
- Capability inventory: Full shell access to execute infrastructure-altering
terraformcommands and interaction with remote AI APIs. - Sanitization: No evidence of sanitization or filtering of the source code content before it is processed by the AI models.
Audit Metadata