diff-review
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from git logs and code diffs, which could contain malicious instructions designed to influence the agent's analysis.
- Ingestion points: The skill reads data using git commands (diff, log, show) and accesses local files in Step 1 and Step 2.
- Boundary markers: No specific delimiters are defined to separate the untrusted source code from the agent's core instructions.
- Capability inventory: The agent is instructed to execute git commands and perform file system reads.
- Sanitization: There is no mention of sanitizing or filtering the content retrieved from the repository history.
Audit Metadata