code-hotspots
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell command pipelines involving
git,sed,awk,sort,uniq, andwcto extract and process metadata from the local git repository's history. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from git logs, which represents an untrusted data ingestion surface.
- Ingestion points: Git commit messages, author names, and file paths extracted via
git loginSKILL.mdsteps 1, 2, 3, and 4. - Boundary markers: No specific delimiters or warnings are used to prevent the agent from interpreting instructions that might be embedded in commit messages.
- Capability inventory: Execution of shell commands for file analysis and git operations.
- Sanitization: No validation or sanitization of the git log output is performed before it is processed by shell utilities.
Audit Metadata