review
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands (
git diff) to access and analyze code changes. This is the primary function of the skill and is executed within the context of a development workflow. - [PROMPT_INJECTION]: The skill analyzes untrusted data in the form of code diffs, which represents an Indirect Prompt Injection surface. However, the risk is mitigated by explicit 'AUTO Criteria' that restrict automated actions to non-behavioral changes (e.g., whitespace, unused imports), while logic changes or bug fixes require explicit user confirmation.
Audit Metadata