explain-diff-html
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of code diffs, branches, and PR descriptions to generate explanations.
- Ingestion points: Reads source code changes and surrounding project context (SKILL.md).
- Boundary markers: None specified to differentiate between the analysis instructions and the data being analyzed.
- Capability inventory: Writes a single self-contained HTML file to the
/tmp/directory. - Sanitization: No explicit sanitization or escaping of the ingested code content is defined in the instructions before rendering into the HTML output.
Audit Metadata