requesting-code-review
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses git commands like
git rev-parseandgit logto identify commit identifiers. These are routine operations within a development workflow. - [PROMPT_INJECTION]: The skill processes user-provided task descriptions and implementation details into a subagent prompt, creating a surface for indirect prompt injection. * Ingestion points: {WHAT_WAS_IMPLEMENTED}, {PLAN_OR_REQUIREMENTS}, and {DESCRIPTION} placeholders in SKILL.md. * Boundary markers: Not specified in the provided text. * Capability inventory: Local git operations and subagent task dispatching. * Sanitization: No sanitization or input validation is mentioned for the ingested data.
Audit Metadata