dx
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious code or security vulnerabilities were identified. The skill acts strictly as an advisory tool and follows its documented workflow without accessing sensitive data or performing unauthorized network operations.\n- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface because it reads and analyzes code provided in the user's environment.\n
- Ingestion points: The agent is instructed in
SKILL.mdto "Read all target files completely" based on user requests or git history.\n - Boundary markers: No delimiters or specific instructions are provided to the agent to distinguish between its internal rules and potential instructions within the reviewed code files.\n
- Capability inventory: The agent has permissions to read local files and execute
gitcommands for discovery.\n - Sanitization: Input file content is not sanitized or filtered before analysis.\n- [COMMAND_EXECUTION]: The skill utilizes
git diffto identify recently changed files for review. This is a standard and expected operation for a developer tool and does not pose a security risk in this context.
Audit Metadata