sem-semantic-diff
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
semCLI utility for structural codebase analysis, including commands for diffing, impact analysis, and dependency graphing. - [PROMPT_INJECTION]: The skill processes content from the local codebase through commands like
sem entitiesandsem context, which introduces a surface for indirect prompt injection if analyzed files contain malicious instructions. - Ingestion points:
sem entities,sem diff,sem context, andsem blameoutputs inSKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded code comments.
- Capability inventory: Shell command execution for the
semtool across all listed commands. - Sanitization: No sanitization logic is provided for the codebase content retrieved by the CLI.
Audit Metadata