understand-diff
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git diffto identify modified files andgrepto query a local JSON knowledge graph for metadata and dependency information. These are standard operations for repository analysis tools. - [DATA_EXFILTRATION]: No network operations or external data transmissions are performed; all data processing and file writes are restricted to the local filesystem and the
.understand-anything/directory. - [PROMPT_INJECTION]: The skill processes external data from git diffs and local files. While this represents a surface for indirect prompt injection, the instructions focus on technical analysis and local file generation, posing no significant security risk.
Audit Metadata