desktop-commands-audit
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to audit code changes and run project tests. Evidence includes 'git diff', 'gh pr diff', and 'mise run' commands within SKILL.md. These are standard developer tools for repository management and testing. \n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from code diffs, creating an attack surface for indirect prompt injection. \n
- Ingestion points: Code changes retrieved via 'git diff' or 'gh pr diff' (SKILL.md). \n
- Boundary markers: None specified. \n
- Capability inventory: Access to repository tools (git, gh) and local test execution (mise). \n
- Sanitization: No sanitization of the diff output.
Audit Metadata