spec-review
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use git fetch and git diff commands to retrieve and compare code changes. These commands involve shell execution with parameters that may be derived from external data or user input.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from requirement tickets, contracts, and code diffs, creating a potential surface for indirect prompt injection attacks.\n
- Ingestion points: Requirements from tickets/contracts and source code diffs (SKILL.md).\n
- Boundary markers: No explicit delimiters or instructions to ignore embedded instructions are specified for the external data ingested by the agent.\n
- Capability inventory: The skill utilizes Git command execution (SKILL.md).\n
- Sanitization: There is no evidence of validation or sanitization for the ticket content or code diffs being processed.
Audit Metadata