forge-diff
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: Analysis of the skill instructions and metadata found no evidence of malicious patterns, such as prompt injection, data exfiltration, or obfuscation. The skill defines a standard report-generating task based on local files.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external content (CSS files and .forge.json). While this creates a theoretical ingestion surface for indirect prompt injection, the risk is negligible due to the lack of dangerous capabilities.
- Ingestion points: CSS source files and
.forge.json(referenced in SKILL.md). - Boundary markers: None provided in the instructions.
- Capability inventory: No scripts or tools are provided; the skill relies on the agent's default file-reading behavior.
- Sanitization: No sanitization or filtering is specified for the ingested file content.
Audit Metadata