no-comments
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted external data in the form of code files and diffs and has the capability to modify the codebase. * Ingestion points: The skill reads the caller's files or the current Git diff (SKILL.md). * Boundary markers: The instructions do not define delimiters or instructions to ignore commands that might be embedded within the processed code. * Capability inventory: The agent has the authority to spawn sub-agents, delete code, and implement structural fixes (SKILL.md). * Sanitization: No sanitization or validation steps are provided for the input code or diff data.
Audit Metadata