nullable-new-params
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a helper script
scripts/find-new-optional-params.tsthat executes thegit diffcommand locally usingBun.spawnSync. The script allows passing user-provided arguments (like branch names or diff ranges) to the git command, which is a standard pattern for developer tooling. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data in the form of local code diffs to identify specific syntax patterns.
- Ingestion points: The
scripts/find-new-optional-params.tsscript reads the output ofgit diffto analyze code changes. - Boundary markers: None are present in the script's processing logic.
- Capability inventory: The script performs read-only analysis of the diff and outputs findings to the console; it does not perform network operations or unauthorized file writes.
- Sanitization: The script uses specific regular expressions to target TypeScript optional members (
?:) and method signatures (?(), ignoring comments and empty lines.
Audit Metadata