diff-risk-review

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes standard git commands including git diff and git diff --staged to retrieve local source code changes.
  • [PROMPT_INJECTION]: The skill processes uncommitted code changes which constitutes an indirect prompt injection surface. Maliciously crafted code comments in the diff could attempt to influence the agent's review findings.
  • Ingestion points: Content returned by git diff commands.
  • Boundary markers: None specified in the workflow instructions.
  • Capability inventory: Limited to reading git diffs and providing text-based analysis.
  • Sanitization: No explicit sanitization or escaping of diff content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 04:06 PM
Security Audit — agent-trust-hub — diff-risk-review