explain-diff
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local command-line utilities including 'git' and 'gh' (GitHub CLI) to retrieve code diffs, commit history, and pull request metadata. It also uses the 'open' command to launch the generated HTML report in the system's default browser.
- [PROMPT_INJECTION]: The skill processes untrusted content from pull request descriptions, discussions, and source code files, which presents a surface for indirect prompt injection.
- Ingestion points: Data is ingested from the output of 'gh pr view', 'gh pr diff', and through the reading of local repository files.
- Boundary markers: No specific delimiters or instructions are provided to the agent to isolate or ignore potentially malicious instructions embedded in the ingested data.
- Capability inventory: The agent has the capability to execute shell commands and write files to the '/tmp' directory.
- Sanitization: The instructions do not specify any sanitization or escaping requirements for the untrusted data before it is included in the generated HTML report.
Audit Metadata