version-control
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from repository history, branch names, and issue trackers which could contain malicious instructions.\n
- Ingestion points: Commit messages (
references/commit-practices.md), PR descriptions (references/collaboration-review.md), and issue content (references/traceability.md).\n - Boundary markers: Uses structured markdown templates for PRs, but lacks explicit "ignore embedded instructions" directives.\n
- Capability inventory: Execution of shell commands (Git operations) and file system writes (repository initialization and documentation authoring).\n
- Sanitization: No explicit sanitization or filtering of external content before processing or interpolation into agent tasks.
Audit Metadata