author-contributions

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill operates by running standard git utilities like git log and git diff-tree to inspect repository history. These commands are fundamental for version control analysis and are used here within their typical context.
  • Dynamic Execution: The instructions recommend generating and running a temporary Python script to perform complex data transformations and walk rename chains. The provided script employs the subprocess module with arguments passed as a list, which is a secure method for executing shell commands without being vulnerable to shell injection.
  • Indirect Prompt Injection Considerations: This skill ingests data from the local repository (such as file paths and git logs) and processes it into a summary table. Since this data is sourced from git history, it is subject to the integrity of the repository itself; however, the skill incorporates safe argument handling for its internal operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:33 PM
Security Audit — agent-trust-hub — author-contributions