deslop

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: Indirect prompt injection surface identified. The skill processes external data from git diffs which could contain adversarial instructions designed to influence the agent's behavior during the cleanup process.
  • Ingestion points: The skill reads branch changes via git diff main...HEAD as described in SKILL.md.
  • Boundary markers: No delimiters or instructions to ignore embedded prompts are provided to the agent.
  • Capability inventory: The skill implies the capability to modify source files to remove identified 'slop'.
  • Sanitization: No sanitization or validation of the ingested diff content is performed.
  • [COMMAND_EXECUTION]: The skill executes git diff main...HEAD to retrieve branch information for analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 10:19 PM
Security Audit — agent-trust-hub — deslop