explain
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands (
git log) using values directly derived from user input ($ARGUMENTS). If the agent platform does not properly escape these arguments, it could lead to command injection vulnerabilities. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data, including source code files and git history output, which could contain malicious instructions designed to manipulate agent behavior.
- Ingestion points:
$ARGUMENTS(user-supplied file or flow description), target source code contents, and shell output from git commands. - Boundary markers: Absent. The instructions do not provide delimiters or specific warnings to the agent to disregard instructions embedded within the code or git logs being analyzed.
- Capability inventory: Shell command execution (via terminal/git tools) and file system read access.
- Sanitization: Absent. The skill does not define validation or escaping logic for the user-provided arguments before they are passed to shell tools.
Audit Metadata