summary
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions call for executing local git commands including
git branch,git log, andgit diffto collect data for summarization. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection by processing external data from the git repository.
- Ingestion points: Data enters the context via
git logandgit diffcommands inSKILL.md. - Boundary markers: Absent. There are no instructions to the agent to treat diff/log content as untrusted data or to use delimiters.
- Capability inventory: The skill utilizes git commands and reads codebase files.
- Sanitization: Absent. No validation or filtering is performed on the commit messages or diff content before processing.
Audit Metadata