git-workflow-and-versioning
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill involves inspecting existing codebase files and repository evidence, which creates a surface for indirect prompt injection if the analyzed files contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The agent is instructed to inspect available files, runtime environments, and repository evidence (SKILL.md Workflow Step 1).
- Boundary markers: The instructions do not specify the use of clear delimiters or instructions to ignore embedded commands within the repository data.
- Capability inventory: The skill has access to local files and uses the sandbase_run tool to execute external capabilities based on the analysis.
- Sanitization: The skill does not describe specific sanitization or filtering techniques for data read from the local repository.
Audit Metadata