comparing-branches-visually
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute git commands (
git worktree add,git diff,git worktree remove) and Node.js commands (npm run dev) on the local filesystem. These are standard operations for a development-focused agent to perform automated visual testing. - [INDIRECT_PROMPT_INJECTION]: The workflow involves ingesting output from local development tools which could potentially be influenced by untrusted data if a repository contains malicious filenames or page content.
- Ingestion points: Output of
git diff --name-onlyand the content of pages served athttp://localhost:3000andhttp://localhost:3001(SKILL.md). - Boundary markers: None present.
- Capability inventory: File system access via git, command execution via shell, and browser navigation/screenshotting capabilities (SKILL.md).
- Sanitization: No specific sanitization is mentioned for filenames or local page content.
Audit Metadata