reanchor

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill directs the agent to utilize standard CLI tools, specifically git and gh, to verify the state of the development environment. It uses git fetch to check for branch divergence and gh to retrieve the current status of pull requests and issues. This is consistent with its stated purpose of re-anchoring session assumptions.
  • [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests and reports on data from external sources such as pull request descriptions and issue content.
  • Ingestion points: Data is retrieved from PRs, issues, and branches using gh and git commands as described in SKILL.md.
  • Boundary markers: No explicit delimiters are mentioned to separate untrusted data from instructions.
  • Capability inventory: The skill utilizes git (fetch, rev-list) and gh to interact with the repository and GitHub for state reporting.
  • Sanitization: No explicit sanitization or validation of the retrieved content is mentioned before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 07:55 PM
Security Audit — agent-trust-hub — reanchor