no-comments
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git commands (
git diff,git ls-files) and usesbunx turboto run linting on modified packages. These are standard developer tools used within their expected contexts for identifying changes and validating code integrity. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from external code files and Git diffs, which creates a potential surface where malicious instructions embedded in code comments could influence agent behavior.
- Ingestion points: Source code files and diffs identified via
git diffandgit ls-files(SKILL.md). - Boundary markers: The instructions do not define explicit boundary markers or warnings to ignore instructions that might be contained within the comments being processed.
- Capability inventory: The agent is authorized to modify local files (deleting comments) and execute build/lint tools via
bunx turbo. - Sanitization: No explicit sanitization or filtering is performed on the content of the comments before they are classified and processed.
Audit Metadata