diff-inspector
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to inspect git state and file history, which is essential for its primary function of code review. - [PROMPT_INJECTION]: There is a potential for indirect prompt injection as the skill processes untrusted user-provided code diffs and pastes.
- Ingestion points: Code diffs from user input and repository files via
ReadandBashtools. - Boundary markers: No explicit markers are present to instruct the agent to ignore instructions embedded within the code diffs.
- Capability inventory: The skill has access to
Bash,Write,Edit, andAgenttools. - Sanitization: The skill does not perform sanitization of the processed code content.
Audit Metadata