hunk-review
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill enables interaction with the local
hunkCLI tool. It utilizeshunk sessioncommands to inspect and control live diff review sessions, including the ability to reload session content with subcommands likedifforshow.\n- [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface for indirect prompt injection by processing untrusted repository data via diff inspection commands. It lacks explicit instructions for sanitization or the use of boundary markers when interpreting this data.\n - Ingestion points: Repository diff content is ingested through
hunk session review --jsonandhunk session review --include-patch(SKILL.md).\n - Boundary markers: Absent. No delimiters or instructions to ignore embedded content are provided.\n
- Capability inventory: The skill provides CLI execution capabilities via the
hunk sessioncommand set, including navigation and session reloading (SKILL.md).\n - Sanitization: Absent. The skill does not describe any validation or filtering of the processed diff data.
Audit Metadata