update-instructions
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- Command Execution: The skill utilizes standard version control commands, such as
git diffandgit merge-base, to analyze project modifications. This is appropriate for its stated purpose of identifying changes on the current branch. - File Access: It reads instruction files located within the
.github/instructionsdirectory. This access is necessary for the skill to perform its primary function of auditing and suggesting updates to those files. - Indirect Prompt Injection Surface: The skill processes external content from git diffs and existing documentation. While processing untrusted data can pose a theoretical risk of indirect prompt injection, the skill's limited output capabilities (textual suggestions) and defined scope within the project environment make this a low-impact consideration.
Audit Metadata