lesson-learned
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content from git history which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Git commit messages and code diffs gathered via
git logandgit diffin Phase 2 ofSKILL.md. - Boundary markers: No explicit markers or instructions to ignore embedded commands are defined for the analysis phase.
- Capability inventory: The skill utilizes git tools to read project history and files.
- Sanitization: There is no evidence of sanitization or filtering of the ingested git data before processing.
Audit Metadata