quick-finalize

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes code changes using git diff as part of its logical unit analysis, which represents an ingestion point for potential indirect prompt injections where adversarial content in the code could influence agent behavior.
  • Ingestion points: The output of git diff --cached --stat and git diff --cached in Phase 7.
  • Boundary markers: The skill does not define specific delimiters or instructions to isolate the code being analyzed from the agent's operational instructions.
  • Capability inventory: The skill executes git commands and orchestrates other skills that perform file writes, commits, and pull request creation.
  • Sanitization: No explicit sanitization of the diff content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 09:02 PM