analyzing-recent-project-state
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches reference documentation and best-practice guidelines from well-known and trusted organizations such as Google, Microsoft, GitHub, and the Git Project. These external links are used to inform the analysis process and do not involve executable code or untrusted dependencies.- [COMMAND_EXECUTION]: The skill performs local Git command execution to gather project evidence. This capability is restricted to a specific set of read-only commands (e.g., git status, git log, git diff --stat). The skill includes explicit instructions to sanitize these logs to prevent the leakage of sensitive data like secrets or full diffs into the AI context.- [PROMPT_INJECTION]: The skill processes untrusted data from local Git repositories, including commit messages and file contents, which represents an indirect prompt injection surface.
- Ingestion points: Untrusted data is ingested during the Git evidence collection and code inspection phases within the subagents.
- Boundary markers: The skill implements strong boundary markers by instructing the agent across all files to treat retrieved content strictly as evidence to be summarized and never as instructions that could alter its behavior or scope.
- Capability inventory: Capabilities are limited to local read-only Git operations, subagent dispatch, and fetching pinned documentation URLs. No mutation or broad execution tools are authorized.
- Sanitization: The skill enforces content summarization and sanitization of command outputs to ensure that malicious instructions or secrets in the analyzed data are not processed as active commands.
Audit Metadata