lesson-learned
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands to inspect the repository state and history.
- Evidence: Executes
git log,git diff,git show, andgit diff --statto gather context for analysis as described in Phase 1 and Phase 2 ofSKILL.md. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it incorporates untrusted third-party data into the agent's context.
- Ingestion points: Data from git commit messages and file diffs are read into the context in Phase 2 of
SKILL.md. - Boundary markers: There are no instructions provided to use delimiters or to disregard potential instructions embedded within the git history.
- Capability inventory: The skill has shell execution capabilities via the
gitcommand suite. - Sanitization: The skill lacks any mechanism to sanitize or filter the content of commit messages or code changes before processing.
Audit Metadata