diff-recap
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git diffcommands (git diff --name-statusandgit diff --numstat) to extract metrics and file statuses from the local repository. - [COMMAND_EXECUTION]: The skill involves running a local Node.js script
tools/diff-recap-check.mjsto validate the integrity and consistency of the generated summaries against the raw git data. - [PROMPT_INJECTION]: The skill processes untrusted data from git diffs which could potentially contain malicious instructions intended to influence the agent's summary output.
- Ingestion points: Git diff output including file paths, change counts, and status indicators (SKILL.md, protocol.yon).
- Boundary markers: No explicit delimiters or 'ignore embedded instructions' warnings are used to isolate the git diff data within the prompt.
- Capability inventory: The skill executes local shell commands and generates markdown content intended for user consumption (PR summaries).
- Sanitization: No explicit sanitization, escaping, or validation of the ingested file paths or diff metadata is described.
Audit Metadata