seed-change-plan
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script executes
gitcommands (such asgit diff,git ls-files, andgit show) to analyze repository changes and branch history. These commands are executed locally usingspawnSyncwith arguments derived from internal logic or validated user input to ensure operations remain within the repository context. - [INDIRECT_PROMPT_INJECTION]: The skill processes repository metadata to determine project impact.
- Ingestion points: The script reads content from
package.jsonand.changeset/*.mdfiles within the repository to identify package names and required version bumps. - Boundary markers: No explicit boundary markers are used for the ingested content.
- Capability inventory: The skill has the capability to execute
gitsub-processes and suggest subsequent shell commands (bun generate:all,bun test:all) to the agent. - Sanitization: Inputs such as file paths are normalized to prevent directory traversal, and data extraction is limited to specific fields and patterns via JSON parsing and regular expressions.
Audit Metadata