diff-inspector

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to inspect git state and file history, which is essential for its primary function of code review.
  • [PROMPT_INJECTION]: There is a potential for indirect prompt injection as the skill processes untrusted user-provided code diffs and pastes.
  • Ingestion points: Code diffs from user input and repository files via Read and Bash tools.
  • Boundary markers: No explicit markers are present to instruct the agent to ignore instructions embedded within the code diffs.
  • Capability inventory: The skill has access to Bash, Write, Edit, and Agent tools.
  • Sanitization: The skill does not perform sanitization of the processed code content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 04:47 AM
Security Audit — agent-trust-hub — diff-inspector