diff-risk-review
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes standard git commands including
git diffandgit diff --stagedto retrieve local source code changes. - [PROMPT_INJECTION]: The skill processes uncommitted code changes which constitutes an indirect prompt injection surface. Maliciously crafted code comments in the diff could attempt to influence the agent's review findings.
- Ingestion points: Content returned by
git diffcommands. - Boundary markers: None specified in the workflow instructions.
- Capability inventory: Limited to reading git diffs and providing text-based analysis.
- Sanitization: No explicit sanitization or escaping of diff content is performed before processing.
Audit Metadata