explain-diff
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted input from git diffs and branch content.
- Ingestion points: Reads git diffs and PR metadata (SKILL.md, Section 1 and 2).
- Boundary markers: Explicit boundary markers are not defined for the agent's internal reasoning phase, although the output generation phase requires escaping.
- Capability inventory: The skill performs file reads (source code), executes git commands, writes HTML/ledger files, and potentially uses a browser tool for verification.
- Sanitization: The REFERENCE.md file mandates escaping source text, quiz options, and feedback before insertion, and strictly prohibits network URLs in the generated HTML.
- [COMMAND_EXECUTION]: The skill requires the agent to execute git commands to resolve branches and fetch PR metadata based on user-supplied flags like --target or --pr (SKILL.md, Flags).
- [DATA_EXFILTRATION]: The skill reads source code, git history, and configuration files to build context for its explanations (SKILL.md, Section 2).
Audit Metadata