explain-diff-html
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted content from code changes, diffs, or pull requests to generate its reports.
- Ingestion points: The agent is instructed to read the 'specified code change' and 'broadly explore surrounding code' in the user's repository (SKILL.md).
- Boundary markers: No specific boundary markers or instructions to ignore embedded commands within the analyzed code are provided.
- Capability inventory: The skill has the capability to write files to the local filesystem (e.g., to
/tmp/) and generate executable JavaScript for interactive components. - Sanitization: There are no explicit instructions to sanitize or escape the code being analyzed before it is rendered into the final HTML output. If an attacker includes malicious instructions or script tags in a pull request, the agent may inadvertently include them in the resulting interactive report.
- [DYNAMIC_EXECUTION]: The skill requires the agent to generate a self-contained HTML file containing CSS and JavaScript. This involves the dynamic creation of script logic (for quizzes and interactivity) based on the content of the analyzed code.
Audit Metadata