dotnet-change-impact
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include the use of read-only Git commands to inspect repository metadata and code diffs, such as
git log,git diff, andgit symbolic-ref. These are used solely for identifying changes between branches for versioning analysis.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Git commit histories and diffs.\n - Ingestion points: Local Git repository data and user-provided change summaries (SKILL.md).\n
- Boundary markers: The skill does not implement specific delimiters or warnings for embedded instructions in analyzed diffs.\n
- Capability inventory: The agent is restricted to read-only Git commands.\n
- Sanitization: No explicit input validation or sanitization is performed on the analyzed content.
Audit Metadata