code-review
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands, specifically
git, to analyze differences between branches, retrieve commit hashes, and generate file system fingerprints. These commands are restricted to the repository context and are necessary for the skill's core functionality. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data in the form of code diffs and user-provided source files. This represents a standard attack surface for skills processing external content. The risk is mitigated by the skill's purpose, which is limited to generating a qualitative report rather than executing code.
- [DATA_EXFILTRATION]: The skill accesses local repository data and metadata (via
git diffandgit status) to identify changes. No evidence was found of this data being transmitted to unauthorized external domains, as the skill contains no network-bound operations.
Audit Metadata