audit-consolidation
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
git logfor investigating code history andmiseto execute project-specific scripts such as linting, building, and testing. These are standard development operations but involve shell execution of project-defined tasks.\n- [INDIRECT_PROMPT_INJECTION]: The skill operates on user-provided source code, creating an attack surface where malicious instructions embedded in the code could influence agent behavior.\n - Ingestion points: All files within the user-specified project or directory (referenced in
SKILL.md).\n - Boundary markers: None explicitly defined to distinguish code content from instructions.\n
- Capability inventory: Subprocess execution via
git log,git diff, andmisefor project lifecycle scripts (referenced inSKILL.md).\n - Sanitization: No specific sanitization or escaping of code content is mentioned before processing.
Audit Metadata