reflect-on-changes
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill incorporates an indirect prompt injection surface where external repository content can influence agent behavior. 1. Ingestion points: The agent is instructed to inspect the current git diff, untracked files, and review artifacts (SKILL.md). 2. Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions embedded within the analyzed code or review notes. 3. Capability inventory: The agent has the ability to update repository files directly and implement/execute various linting tools or custom scripts (SKILL.md). 4. Sanitization: No mechanisms for sanitizing or validating the contents of the ingested files are defined before the data is processed.
- [COMMAND_EXECUTION]: The workflow involves the execution of code analysis and validation tools. The agent is directed to select and implement enforcement layers using tools like ESLint, Nx, Semgrep, and Knip, or to run custom validation scripts (SKILL.md).
Audit Metadata