explain-diff
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data by reading git diffs, commit messages, and pull request descriptions from external sources. While this presents an attack surface where an attacker could embed malicious instructions in code comments, the skill includes instructions to verify findings against source files and separate inferred intent from stated facts, which serves as a logical guardrail.
- [DYNAMIC_EXECUTION]: The skill generates a self-contained HTML file that includes inline JavaScript to power an interactive 'comprehension gate' for the user. Security risks are mitigated by explicit instructions that the output must not include external network calls, CDNs, or external packages, ensuring the script runs in a restricted, local context.
- [COMMAND_EXECUTION]: The skill executes standard command-line tools such as
gitandgh(GitHub CLI) to gather information about code changes and PR metadata. These are routine operations for the skill's primary purpose of code analysis. - [EXTERNAL_DOWNLOADS]: The skill fetches data from GitHub using official tooling. These references to a well-known service for retrieving code metadata are expected and handled safely.
Audit Metadata