resolving-edge-cases
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as
git status --shortandgit diff --name-onlyto define the scope of its analysis based on local changes or branch history. - [COMMAND_EXECUTION]: The skill requires the agent to generate and run executable regression tests and verification gates to ensure bug fixes are effective and do not introduce regressions.
- [PROMPT_INJECTION]: The skill is exposed to potential indirect prompt injection because it ingests untrusted code and documentation from the local repository as its primary data source.
- Ingestion points: Modified files, git history output, pull request context, and repository documentation (SKILL.md).
- Boundary markers: The skill does not define specific delimiters or instructions to prevent the agent from following directions that might be embedded in the code it analyzes.
- Capability inventory: The agent has the capability to execute shell commands (
git) and run arbitrary test scripts or build tools (SKILL.md). - Sanitization: There is no evidence of sanitization or filtering of the repository content before it is processed by the agent.
Audit Metadata