organize-changes
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as
git merge-base,git diff,git status, andgrepto determine which files have changed and to identify code definitions within those files. - [PROMPT_INJECTION]: The skill processes external data in the form of repository code and diff outputs, which constitutes a surface for Indirect Prompt Injection (Category 8).
- Ingestion points: Repository content and git diffs are read from the local file system using
gitandgrepcommands. - Boundary markers: There are no specific instructions to use delimiters or ignore instructions found within the ingested codebase content.
- Capability inventory: The skill can perform file edits on the local file system through the use of sub-agent tasks.
- Sanitization: The skill does not implement explicit sanitization of the content read from the repository before it is processed by the agent.
Audit Metadata