pair-with-me
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data by running
git diffto provide code reviews.\n- Ingestion points:git diffandgit diff --statoutput processed in the 'Check-ins' section ofSKILL.md.\n- Boundary markers: No explicit delimiters or 'ignore embedded instructions' warnings are defined within the skill.\n- Capability inventory: The skill is capable of runninggitcommands (diff, commit), spawning a subagent for review, and communicating viaAskUserQuestion.\n- Sanitization: No explicit sanitization, validation, or filtering of the ingested code content is performed.\n- [SAFE]: The skill implements standard collaborative programming patterns such as ping-pong and driver/navigator loops. No malicious code execution, data exfiltration, or obfuscation techniques were identified.
Audit Metadata