review
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from git diffs and repository files as part of its primary workflow.
- Ingestion points: Workflow steps 2 and 3 in SKILL.md ingest output from git diff, git log, and potential PRD files directly into the agent context.
- Boundary markers: There are no explicit delimiters or instructions to treat the reviewed code as untrusted or to ignore instructions contained within it.
- Capability inventory: The skill utilizes git commands (fetch, diff, log, status) and includes instructions to write durable outcomes to tasks/context.md.
- Sanitization: The instructions do not specify any validation, escaping, or sanitization of the external content before it is processed by the agent.
Audit Metadata