hunk-staging
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from git repositories which is a potential surface for indirect prompt injection.
- Ingestion points: The agent is instructed to read content from
git diff --cachedandgit hunks list(SKILL.md). - Boundary markers: Absent. The instructions do not specify the use of delimiters or 'ignore-embedded-instructions' markers when processing the output of git commands.
- Capability inventory: The agent has the ability to execute
git add,git hunks add, andcommit save(SKILL.md). - Sanitization: Absent. No mention of validating or escaping the content retrieved from the git repository before processing.
Audit Metadata