preview-diff
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the diff2html library and associated styles from the jsDelivr CDN. It correctly implements Subresource Integrity (SRI) hashes to ensure the integrity and authenticity of these external resources.
- [COMMAND_EXECUTION]: The script executes git diff to retrieve code changes and utilizes system commands such as open, xdg-open, or start to launch the generated HTML preview in the user's default browser.
- [SAFE]: Implements a robust Content Security Policy (CSP) in the generated HTML files, which restricts resource loading and prevents unauthorized script execution.
- [SAFE]: Input data from git diff is sanitized using base64 encoding and HTML escaping before being embedded into the preview template, effectively mitigating cross-site scripting (XSS) and injection vulnerabilities.
Audit Metadata