diff-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard git commands (such as git log, git diff, and git merge-base) to extract metadata and change statistics from a repository. These operations are restricted to read-only analysis of the workspace context.- [EXTERNAL_DOWNLOADS]: The skill mentions the sem utility (Semantic Diff) and provides a GitHub link for reference. It includes logic to check for the local presence of the tool before attempting to use it, but it does not perform any automated downloads or installations from remote sources.- [INDIRECT_PROMPT_INJECTION]: This skill is designed to process external, potentially untrusted data in the form of git diffs and changesets. While this represents a theoretical attack surface, the skill does not include any high-risk capabilities, such as dynamic code execution or network exfiltration, that would allow a malicious payload within a diff to compromise the system.
Audit Metadata