author-contributions
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill operates by running standard git utilities like
git logandgit diff-treeto inspect repository history. These commands are fundamental for version control analysis and are used here within their typical context. - Dynamic Execution: The instructions recommend generating and running a temporary Python script to perform complex data transformations and walk rename chains. The provided script employs the
subprocessmodule with arguments passed as a list, which is a secure method for executing shell commands without being vulnerable to shell injection. - Indirect Prompt Injection Considerations: This skill ingests data from the local repository (such as file paths and git logs) and processes it into a summary table. Since this data is sourced from git history, it is subject to the integrity of the repository itself; however, the skill incorporates safe argument handling for its internal operations.
Audit Metadata