explain-diff
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses standard Git commands (git diff, git show) to retrieve diff information for explanation. These operations are restricted to the local repository context and are typical for code analysis tasks.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from git diffs. Malicious instructions embedded in code comments could attempt to influence the agent's summary.
- Ingestion points: Data enters the agent context via git diff and git show outputs in SKILL.md.
- Boundary markers: No delimiters or explicit warnings are provided to the agent to disregard instructions within the analyzed code.
- Capability inventory: The skill is designed to read local files and execute local Git commands; it does not include network access or file-writing capabilities.
- Sanitization: No input validation or sanitization of the diff content is performed before analysis.
Audit Metadata