audit-shipped

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes git log, git diff, and git grep commands to analyze repository history and code changes as part of its auditing workflow.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface for indirect prompt injection by processing data from the repository, including git history and markdown documentation, which could contain malicious instructions.\n
  • Ingestion points: Git command outputs and repository files such as requirements.md and design.md.\n
  • Boundary markers: The instructions lack explicit delimiters or instructions to ignore embedded content within the analyzed files.\n
  • Capability inventory: The agent can execute git commands and read local files.\n
  • Sanitization: No sanitization is performed on the data retrieved from the repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 04:42 AM