understand-diff

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses git diff to identify modified files and grep to query a local JSON knowledge graph for metadata and dependency information. These are standard operations for repository analysis tools.
  • [DATA_EXFILTRATION]: No network operations or external data transmissions are performed; all data processing and file writes are restricted to the local filesystem and the .understand-anything/ directory.
  • [PROMPT_INJECTION]: The skill processes external data from git diffs and local files. While this represents a surface for indirect prompt injection, the instructions focus on technical analysis and local file generation, posing no significant security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 12:08 PM
Security Audit — agent-trust-hub — understand-diff