pr-merge-champion
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing external data in the form of git diffs and project source code. This introduces a surface for indirect prompt injection where instructions embedded within the code being reviewed could potentially influence the agent's output or actions.\n
- Ingestion points: The agent is instructed to read local files and git diff output (SKILL.md, Step 1 and 2).\n
- Boundary markers: There are no explicit instructions to use delimiters or ignore embedded prompts within the data being analyzed.\n
- Capability inventory: The skill suggests using shell-based tools for testing and inspection, such as
npm,git status, andgit diff(SKILL.md, Step 3 and Example 2).\n - Sanitization: No methods for sanitizing or escaping the content of the diffs or code files are provided.
Audit Metadata