differential-review

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security risks were identified. The skill follows best practices for security auditing, emphasizing evidence-based analysis and git history validation.
  • [COMMAND_EXECUTION]: The skill utilizes Bash to execute standard utilities such as git, grep, find, and wc. These tools are used appropriately within the local environment to analyze codebase diffs and calculate blast radius, with no evidence of command injection or malicious shell execution.
  • [PROMPT_INJECTION]: This skill serves as a surface for indirect prompt injection because it ingests and processes untrusted data from pull requests and commit diffs. However, the methodology provides a structured adversarial framework for the agent, which mitigates the risk of being influenced by instructions embedded within the code changes being reviewed.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 10:19 PM
Security Audit — agent-trust-hub — differential-review