suggest-pr
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from git commit logs and diffs, which could contain malicious instructions from external contributors intended to influence the agent's output.
- Ingestion points:
git logandgit diffoutput processed in Steps 2 and 3. - Boundary markers: Absent; the skill does not use specific delimiters to separate commit data from instructions.
- Capability inventory: Read-only git commands and text generation; no file system write or network capabilities are present in the skill scripts.
- Sanitization: Absent; commit messages are processed as-is to generate the summary.
- [COMMAND_EXECUTION]: The skill executes local shell commands to gather branch information and repository status.
- Evidence: Uses
git remote,git log,git branch, andgit diffcommands to collect data for analysis.
Audit Metadata