update-instructions

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • Command Execution: The skill utilizes standard version control commands, such as git diff and git merge-base, to analyze project modifications. This is appropriate for its stated purpose of identifying changes on the current branch.
  • File Access: It reads instruction files located within the .github/instructions directory. This access is necessary for the skill to perform its primary function of auditing and suggesting updates to those files.
  • Indirect Prompt Injection Surface: The skill processes external content from git diffs and existing documentation. While processing untrusted data can pose a theoretical risk of indirect prompt injection, the skill's limited output capabilities (textual suggestions) and defined scope within the project environment make this a low-impact consideration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 07:52 PM
Security Audit — agent-trust-hub — update-instructions