review-branch
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git commands (
git merge-base,git diff,git ls-files) to calculate the changes introduced in a branch. These are standard operations for development-oriented tools.\n- [DATA_EXFILTRATION]: Cumulative code diffs are written to/tmp/review_branch.diffand/tmp/review_branch_new.txt. While this practice provides a local data exposure surface on shared systems, the skill does not perform any network operations to send this data externally.\n- [PROMPT_INJECTION]: The skill reads and processes untrusted data (source code changes) that are then passed to sub-agents for review, which is a surface for indirect prompt injection.\n - Ingestion points: Data from
git diffandgit ls-filesstored in/tmp(SKILL.md).\n - Boundary markers: Agents are provided with a context string identifying the input as a cumulative diff of a branch.\n
- Capability inventory: The skill can execute shell commands (
git), write to the filesystem, and modify source code.\n - Sanitization: No explicit sanitization or filtering of the source code content is performed before it is analyzed by agents.
Audit Metadata