vscode
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing the
codeandgitcommand-line tools. - Commands:
code -d,git show, andgit logare used to facilitate file diffing and version comparison. - Usage: Temporary files are created in
/tmpto store staged or historical versions of files for comparison. - [INDIRECT_PROMPT_INJECTION]: The skill handles file paths and git revision hashes provided by the user or agent, representing a potential attack surface for malformed inputs.
- Ingestion points: File paths and commit identifiers are interpolated into shell commands in
SKILL.md. - Boundary markers: None are explicitly defined for these inputs.
- Capability inventory: The skill is scoped to file system read access via
gitand opening a GUI editor viacode. - Sanitization: No specific sanitization or validation of the input strings is mentioned.
Audit Metadata