review
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks as it ingests and processes untrusted data from git diffs and repository files without explicit boundary markers.
- Ingestion points: Ingests data through
git diffand reading repository files likedocs/onboarding/project-memory.mdas defined inSKILL.md. - Boundary markers: No delimiters or instructions are provided to the agent to ignore potentially malicious instructions embedded within the code diffs.
- Capability inventory: The skill utilizes file system reads and standard git operations; no high-risk capabilities such as network exfiltration or arbitrary code execution are defined.
- Sanitization: There is no evidence of input validation, escaping, or sanitization of the content being reviewed.
Audit Metadata