review
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from
git diffoutput. Malicious code or comments within a PR could attempt to influence the agent's feedback or command execution. * Ingestion points:git diff main...HEADinSKILL.md. * Boundary markers: Absent. The instructions do not explicitly tell the agent to ignore instructions embedded in the code under review. * Capability inventory: File modification (apply fixes), command execution (run tests, run lint), and version control operations (commit). * Sanitization: None provided for the incoming diff data. - [COMMAND_EXECUTION]: The skill uses standard development tools including
git,trivy, and project-specific test/lint scripts. While intended for development, these tools are invoked based on logic that processes untrusted code changes.
Audit Metadata