explain-changes
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git status,git diff,git show, andgit logto identify and analyze code modifications. These are standard developer operations required for the skill's functionality. - [EXTERNAL_DOWNLOADS]: The skill uses
git fetch, which connects to the remote repository host to synchronize local branch references. - [PROMPT_INJECTION]: The skill processes code and diff data from the local repository, creating a surface for Indirect Prompt Injection.
- Ingestion points: Untrusted data enters the context through the output of
git diff,git show, and by reading file contents from the workspace. - Boundary markers: The instructions do not define delimiters or specific warnings to ignore instructions embedded within the code being explained.
- Capability inventory: The skill uses subprocess calls to execute
gitcommands and provides detailed analysis back to the user. - Sanitization: There is no evidence of sanitization or validation performed on the ingested code content before analysis.
Audit Metadata