regression-testing
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands, including
git diffandgrep, to identify modified code and track functional references. These operations are essential for the skill's primary purpose and are executed locally within the project context.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data such asgit diffoutputs, bug repair descriptions, and requirement change notes. These inputs present a potential surface for indirect prompt injection if they contain malicious instructions. However, the risk is mitigated by the skill's structured 'analysis chain' which mandates specific mapping logic rather than open-ended interpretation.\n - Ingestion points:
git diffresults, bug repair instructions, and requirement documentation (SKILL.md).\n - Boundary markers: The skill does not define specific delimiters to isolate external inputs from internal instructions.\n
- Capability inventory: The skill uses file-read, local command execution (
git,grep), and markdown file writing capabilities.\n - Sanitization: No specific input sanitization or filtering logic is described.
Audit Metadata