audit-shipped
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git log,git diff, andgit grepcommands to analyze repository history and code changes as part of its auditing workflow.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface for indirect prompt injection by processing data from the repository, including git history and markdown documentation, which could contain malicious instructions.\n - Ingestion points: Git command outputs and repository files such as
requirements.mdanddesign.md.\n - Boundary markers: The instructions lack explicit delimiters or instructions to ignore embedded content within the analyzed files.\n
- Capability inventory: The agent can execute
gitcommands and read local files.\n - Sanitization: No sanitization is performed on the data retrieved from the repository.
Audit Metadata