audit
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
git diff --name-only HEAD~Nto identify the files changed in recent commits to determine the audit scope. This is a common diagnostic command for developers. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and analyze the content of files modified by other processes or users, creating a surface for indirect instructions to be processed by the agent.
- Ingestion points: File contents are read during
Step 3: Content VerificationandStep 4: Frontmatter Validationto check for errors, placeholders, or metadata compliance. - Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions embedded within the files being audited.
- Capability inventory: The skill possesses the ability to read arbitrary files, execute git commands, and write audit reports to the local filesystem.
- Sanitization: No sanitization or escaping of the file content is mandated before the agent processes the data for reporting purposes.
Audit Metadata