pr-description-template
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from Git-related data which could contain malicious instructions.
- Ingestion points: Raw Git diffs, commit lists, and branch names are ingested from the user's environment as specified in SKILL.md.
- Boundary markers: There are no instructions to the agent to use delimiters or to ignore instructions embedded within the provided data.
- Capability inventory: The skill performs text generation and does not explicitly request dangerous tools, though the surrounding agent environment may provide them.
- Sanitization: The instructions do not define any sanitization or validation logic for the provided inputs.\n- [NO_CODE]: The skill consists entirely of markdown instructions and does not include any scripts, binaries, or executable configuration files.
Audit Metadata