pre-landing-review
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code diffs, which could contain malicious instructions (indirect prompt injection) intended to subvert the safety audit or trick the agent into making incorrect fixes.
- Ingestion points: External code diffs and PR content are ingested as described in
SKILL.md(Workflow Step 1). - Boundary markers: None identified in
SKILL.md. The skill does not provide specific instructions to the agent to distinguish between code and embedded instructions within the diffs. - Capability inventory: As per
SKILL.md, the skill can execute shell commands for git operations and has the capability to write to the filesystem to perform code fixes (Workflow Step 3.4). - Sanitization: None identified in
SKILL.mdfor the incoming diff data.
Audit Metadata