vscode
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains instructional content for using the
codeCLI andgitcommands. All described operations are local and align with the skill's stated purpose of visual diffing. - [COMMAND_EXECUTION]: Provides templates for shell commands to view file differences (e.g.,
code -d). These commands utilize standard CLI tools and do not involve remote script execution or privileged operations. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns that ingest user-controlled data such as file paths and commit hashes. However, these are processed by local tools for read-only comparison purposes, representing a minimal attack surface.
Audit Metadata