diff-marketing
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands to retrieve version control history for analysis.
- Evidence: Executes `git log --since="1 week ago" --pretty=format:"%h
- %s (%an, %ar)"
to extract recent changes as described inSKILL.md`. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from external sources.
- Ingestion points: The skill reads data from
git logoutput, pull request descriptions, and the raw content of modified source files as specified in the "Process" section ofSKILL.md. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard instructions potentially embedded within the ingested git metadata or code comments.
- Capability inventory: The skill has the capability to execute shell commands (
git log) and perform file system read operations to gather context for content generation. - Sanitization: The skill does not specify any sanitization, filtering, or escaping of the content retrieved from the git repository before it is processed by the agent.
Audit Metadata