qa-gate
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from previous quality gate files and git history to determine review scope.
- Ingestion points: Metadata and findings from
LATEST_GATEfiles. - Boundary markers: Absent. No explicit delimiters are used to separate user-provided findings from instruction context in the YAML schema.
- Capability inventory: Execution of shell commands (git, awk, sed, grep) and file system writes.
- Sanitization: Basic regex extraction is used for commit hashes.
- [COMMAND_EXECUTION]: The skill performs its logic via local shell commands.
- Evidence:
references/qa-re-review-scope.mdcontains scripts usinggit,awk,sed, andgrep. - [DYNAMIC_EXECUTION]: The skill generates shell commands at runtime using file contents.
- Evidence: Commit hashes from previous gates are used as arguments in
git diffcommands.
Audit Metadata