code-review
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository content such as git diffs and documentation files, which can contain malicious instructions.
- Ingestion points: Git diff outputs, commit logs, and documentation files in .scratch/, docs/, or specs/ directories.
- Boundary markers: The skill uses structured briefs for sub-agents but does not implement explicit boundary markers or 'ignore' instructions to isolate the untrusted content.
- Capability inventory: The skill has the ability to execute git commands and read files via the Bash tool.
- Sanitization: No sanitization or escaping of the ingested code or documentation content is performed before interpolation into sub-agent prompts.
- [COMMAND_EXECUTION]: The skill utilizes git commands including diff, log, merge-base, and rev-parse. These tools are explicitly listed in the allowed-tools frontmatter and are necessary for the skill's stated functionality.
Audit Metadata