history-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from git repository history, which could contain malicious instructions embedded by an attacker.
- Ingestion points: Repository commit history, contributor metadata, and file change logs processed via the
/sourceatlas:historytool (referenced in SKILL.md). - Boundary markers: The instructions do not define delimiters or markers to distinguish between legitimate repository data and potential embedded instructions.
- Capability inventory: The skill utilizes the
/sourceatlas:historytool to perform analysis on the provided repository path (referenced in SKILL.md). - Sanitization: There is no mention of sanitization or filtering for commit messages or contributor-supplied metadata.
- [COMMAND_EXECUTION]: The skill relies on the execution of the
/sourceatlas:historycommand to perform repository analysis and generate statistics on hotspots and coupling.
Audit Metadata