vscode

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill contains instructional content for using the code CLI and git commands. All described operations are local and align with the skill's stated purpose of visual diffing.
  • [COMMAND_EXECUTION]: Provides templates for shell commands to view file differences (e.g., code -d). These commands utilize standard CLI tools and do not involve remote script execution or privileged operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines patterns that ingest user-controlled data such as file paths and commit hashes. However, these are processed by local tools for read-only comparison purposes, representing a minimal attack surface.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 02:40 PM