backbefore
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from Git history, diffs, and prior context outputs to identify previous code states. While inherent to its version-restoration purpose, this creates a surface for indirect prompt injection if the source data contains malicious instructions. The skill lacks explicit boundary markers or sanitization for this ingested content.
- [SAFE]: Explicit safety guidelines are provided to prevent destructive operations like full resets or reverts that might cause data loss.
- [SAFE]: No external network operations, credential harvesting, or unauthorized file access patterns were detected.
- [SAFE]: The skill contains no executable code or external dependencies.
Audit Metadata