security-diff-review
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data (source code changes, commits, and patches). It explicitly identifies this attack surface and instructs the agent to treat repository content as untrusted data rather than commands. It forbids executing target code or fetching URLs, which serves as a mitigation against indirect prompt injection attacks contained within the scanned files.
- [SAFE]: The skill uses localized references and specialized internal tools for security scanning and reporting. No malicious commands, data exfiltration, or obfuscation techniques were identified.
Audit Metadata