understand-diff
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run
git diffto retrieve unstaged changes from the local repository. - [PROMPT_INJECTION]: The skill processes untrusted data from code diffs and source files, which presents a surface for indirect prompt injection.
- Ingestion points: Data enters the context from the output of
git diffand by reading surrounding source code files. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands were found.
- Capability inventory: The skill utilizes command execution (
git diff) and file reading tools. - Sanitization: The skill does not implement any sanitization or validation of the content it processes.
Audit Metadata