the-scribe
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several local shell commands to perform its functions, including
git diff,git log, andgh api. These operations are consistent with the skill's stated purpose of analyzing codebase changes to generate documentation. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it reads and processes arbitrary content from the git history and staged diffs without security precautions.
- Ingestion points: The skill ingests data from
git diff --staged,git log origin/main..HEAD, andgit diff origin/main...HEADas described inSKILL.md. - Boundary markers: None. The instructions do not define clear boundaries or delimiters to isolate untrusted codebase content from the agent's core instructions.
- Capability inventory: The skill uses
gitand theghCLI tool, which allows it to read repository data and interact with GitHub metadata. - Sanitization: No sanitization or escaping is applied to the content retrieved from the diffs or logs before it is processed by the agent.
Audit Metadata