explain-diff-html
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill adopts proactive security measures by mandating the redaction of secrets (API keys, tokens, etc.) and the HTML-escaping of all dynamic text from diffs and pull requests before embedding it into the generated HTML. This mitigates potential cross-site scripting (XSS) and credential exposure.
- [PROMPT_INJECTION]: The skill processes untrusted input from code repositories but mitigates associated risks via sanitization instructions.
- Ingestion points: Git diffs and GitHub PR data.
- Boundary markers: Explicit instructions to escape all dynamic text.
- Capability inventory: File system writes to
/tmpand local file opening. - Sanitization: Mandatory secret redaction and HTML-escaping.
Audit Metadata