review-with-untracked
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill performs git operations such as
add -Nandresetto toggle the visibility of untracked files. It correctly utilizes the--delimiter in bash commands to protect against argument injection from potentially malicious file names. - [DATA_EXFILTRATION]: The skill is designed to expose the contents of untracked files to a chain of review tools. Users should ensure that sensitive files (e.g., .env or keys) are gitignored or excluded via the
Scopeparameter to prevent unintended exposure to the automated review process. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it processes untracked file data.
- Ingestion points: Untracked files discovered via
git statusinSKILL.md. - Boundary markers: Absent; file content is interpreted by the secondary review skills.
- Capability inventory:
Bashfor git manipulation andSkilldispatch for review orchestration. - Sanitization: Includes a post-execution validation step that re-parses YAML frontmatter to detect and warn about corruption caused by called skills.
Audit Metadata