pr-explainer

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute git log and git diff commands to retrieve the commit history and changes for the current branch.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the repository's git logs and unified diffs, which can contain adversarial instructions meant to influence the agent's output.
  • Ingestion points: Output from the git log and git diff commands (SKILL.md).
  • Boundary markers: Absent; the skill does not define clear delimiters or instructions for the agent to ignore prompt-like content inside the analyzed diffs.
  • Capability inventory: Includes shell command execution (git) and the ability to publish content via an internal Artifact tool (SKILL.md).
  • Sanitization: No sanitization or filtering logic is specified for the ingested git data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 06:44 PM