git-review
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various local shell commands such as
git,find,awk, andGoogle Chrometo extract repository data, search for notes, and render documents.- [EXTERNAL_DOWNLOADS]: Downloads and runs themd-to-pdfpackage from the NPM registry usingnpxto facilitate the conversion of reports to PDF format.- [DATA_EXFILTRATION]: Usesgit pullto update the local repository, which involves network communication with the user's configured remote repository providers.- [PROMPT_INJECTION]: Ingests potentially untrusted data from git commit messages and code diffs, creating a surface for indirect prompt injection. - Ingestion points: Outputs from
git log,git diff, and local markdown notes innotes/daily_notes/. - Boundary markers: No specific delimiters or safety instructions are provided to the agent to treat commit content as untrusted data.
- Capability inventory: Includes
Bashtool access, file writing in theoutput/directory, and network access for repository updates and package fetching. - Sanitization: The skill does not perform sanitization or validation of the commit messages before they are included in the analysis context.
Audit Metadata