pr-post-audit
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected. The skill is intentionally designed as a security auditing tool with a focus on defense-in-depth.\n- [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes untrusted data from pull requests, commit messages, and issues, which constitutes a surface for indirect prompt injection. This risk is addressed through explicit defensive instructions.\n
- Ingestion points: Pull request descriptions, issue comments, commit messages, and source code files (SKILL.md).\n
- Boundary markers: The 'Trust Boundary' section provides instructions to the agent to treat external content as evidence, not as instructions.\n
- Capability inventory: Analysis is performed using standard Git commands such as
git logandgit diff.\n - Sanitization: The skill explicitly instructs the agent to ignore any embedded requests to execute commands, reveal secrets, or bypass security checks.
Audit Metadata