backport-skill
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard system and version control commands, including
git log,git diff, anddiff -ru, to manage local code changes. These commands operate on directories and project metadata provided by the user. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code and history from project directories, which presents an attack surface for indirect prompt injection. Ingestion points: Data is read from
skills-lock.jsonand the.agents/skills/directory. Boundary markers: No explicit delimiters are used to separate backported code from agent instructions. Capability inventory: The skill can read local files, generate diffs, and execute commits via the/git-committool. Sanitization: Content is not sanitized before it is summarized or committed back to the source repository.
Audit Metadata