work-report
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute several Git commands (
git status,git log,git diff) to collect context about recent code changes. These are standard inspection commands used to fulfill the skill's primary purpose of summarizing work. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, untrusted data which presents a potential attack surface.
- Ingestion points: Data enters the agent context through the output of Git commands (commit messages, code diffs, branch names) and the current conversation history.
- Boundary markers: The instructions do not specify the use of delimiters or clear boundaries to separate untrusted Git data from the system instructions.
- Capability inventory: The skill has the capability to execute shell commands (for Git inspection) and write files to the local file system (to create the report).
- Sanitization: There is no evidence of sanitization or filtering of the content retrieved from Git before it is processed by the LLM.
Audit Metadata