comparing-branches-visually
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes local repository information to determine test routes, creating a surface where code identifiers could influence agent navigation.\n
- Ingestion points: The skill extracts file names from
git diffto map them to application routes in SKILL.md.\n - Boundary markers: There are no specific markers or instructions to isolate or validate the paths retrieved from the repository.\n
- Capability inventory: The skill utilizes shell commands (
git,npm) and browser automation (browser_navigate,browser_take_screenshot) as documented in SKILL.md.\n - Sanitization: The skill lacks sanitization of the file-to-route mapping process.\n- [COMMAND_EXECUTION]: The skill relies on local shell commands to facilitate the branch comparison workflow.\n
- Evidence: Includes commands for
git worktreecreation/removal andnpmserver execution in SKILL.md.
Audit Metadata