git-diff-summarizer
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is designed for read-only text analysis of git diffs. It includes explicit 'Red Lines' (§1) and a 'Security Baseline' (§7) that forbid shell commands, file system writes, and network calls, ensuring the agent operates in a restricted environment.
- [PROMPT_INJECTION]: The skill processes external untrusted data (git diffs), creating a surface for indirect prompt injection. Mandatory Evidence Chain: (1) Ingestion points:
skill.md(§4 Workflow and §8 Examples) where raw diff text is consumed. (2) Boundary markers: Absent; no specific delimiters are defined to separate data from instructions. (3) Capability inventory: No dangerous tools or commands (such as shell, subprocess, or network tools) are present in the skill definition. (4) Sanitization: Absent; the skill relies on negative constraints to prevent instruction following within the data.
Audit Metadata