reanchor
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to utilize standard CLI tools, specifically
gitandgh, to verify the state of the development environment. It usesgit fetchto check for branch divergence andghto retrieve the current status of pull requests and issues. This is consistent with its stated purpose of re-anchoring session assumptions. - [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests and reports on data from external sources such as pull request descriptions and issue content.
- Ingestion points: Data is retrieved from PRs, issues, and branches using
ghandgitcommands as described inSKILL.md. - Boundary markers: No explicit delimiters are mentioned to separate untrusted data from instructions.
- Capability inventory: The skill utilizes
git(fetch, rev-list) andghto interact with the repository and GitHub for state reporting. - Sanitization: No explicit sanitization or validation of the retrieved content is mentioned before it is processed by the agent.
Audit Metadata