deep-review
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes code changes from the repository, which constitutes an ingestion point for untrusted data that could potentially contain instructions intended to influence the sub-agents' analysis.
- Ingestion points: Reads code diffs and file contents using
gitas described in the revision range establishment step. - Boundary markers: Does not include specific prompt delimiters to separate code content from instructions for the sub-agents.
- Capability inventory: Uses standard
gitcommands and provides suggestions for manual validation commands. - Sanitization: Content is processed directly for review without specific filtering for embedded prompt instructions.
- [COMMAND_EXECUTION]: The skill instructions include standard shell commands for git operations to identify the scope of changes.
- Evidence:
git merge-baseandgit diffcommands are suggested inSKILL.mdfor establishing context.
Audit Metadata