sociuu-resolve-git
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Merge Request and Pull Request comments. It explicitly includes mitigations by instructing the agent to treat these comments as evidence rather than executable instructions and warning against shell command interpolation.
- [COMMAND_EXECUTION]: The skill uses standard forge tools and the
glabCLI to interact with repositories, which is consistent with its stated purpose.
Audit Metadata