find-bugs
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands using
gitandgh(GitHub CLI) to identify the repository's default branch and extract code diffs for review. These tools are used for their intended purpose of repository inspection.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted source code changes from a local branch, creating a potential surface for instructions embedded in the code to influence the agent's behavior. - Ingestion points: Modified files and full branch diffs are read into the agent's context during Phase 1.
- Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the source code being analyzed.
- Capability inventory: The skill has the capability to execute commands (
git,gh) and read arbitrary files in the local workspace. - Sanitization: The instructions do not define sanitization, escaping, or filtering procedures for the content of the analyzed files.
Audit Metadata