pr-explainer
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
git logandgit diffcommands to retrieve the commit history and changes for the current branch. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the repository's git logs and unified diffs, which can contain adversarial instructions meant to influence the agent's output.
- Ingestion points: Output from the
git logandgit diffcommands (SKILL.md). - Boundary markers: Absent; the skill does not define clear delimiters or instructions for the agent to ignore prompt-like content inside the analyzed diffs.
- Capability inventory: Includes shell command execution (git) and the ability to publish content via an internal
Artifacttool (SKILL.md). - Sanitization: No sanitization or filtering logic is specified for the ingested git data.
Audit Metadata