correct
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze repository history (commits, reverts, review comments), creating an attack surface where untrusted data enters the agent's context. Ingestion points: Reads commit messages, reverts, review comments, and instruction files. Boundary markers: No specific delimiters or safety instructions are provided for handling repo-provided content. Capability inventory: Implies capabilities for file modification, commit creation, and shell command execution for testing/CI. Sanitization: No sanitization of the ingested repository data is performed.
- [SAFE]: The skill's instructions represent standard software engineering best practices. No malicious code, obfuscation, or unauthorized access attempts were detected.
Audit Metadata