skills/tobihagemann/turbo/finalize/Gen Agent Trust Hub

finalize

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository to perform its analysis phase.
  • Ingestion points: The output of git diff --cached and git diff --cached --stat is read to categorize changes (e.g., refactoring, bug fix) and decide on splitting units in SKILL.md.
  • Boundary markers: No specific delimiters or "ignore instructions" wrappers are mentioned when processing the diff content.
  • Capability inventory: The skill can execute other skills (/polish-code, /ship, /split-and-ship), manage tasks via TaskCreate, and perform git operations.
  • Sanitization: There is no explicit sanitization or validation of the content provided by the diff output before it is used to influence the workflow logic.
  • [COMMAND_EXECUTION]: The skill invokes standard system commands to inspect the state of the repository.
  • Evidence: Uses git diff --cached --stat and git diff --cached to understand the scope of changes during the "Ship It" phase.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 12:18 PM