trailmark-review-gate
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute Git commands (diff,show,worktree) and thegraph-evolutionTrailmark engine. These operations are essential for its primary function of structural code analysis and are restricted to the local repository context.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from external codebases, including Git refs, commit ranges, and directory structures. This is a common surface for indirect prompt injection in security tools.\n - Ingestion points: Codebase references and structural diff data as described in
SKILL.md.\n - Boundary markers: None explicitly defined for the raw Git data.\n
- Capability inventory: Uses
BashandWritetools to perform analysis and output the final review packet.\n - Sanitization: Employs a normalization step for structural changes and applies deterministic gate rules (e.g., checking for new entrypoints or path changes) to derive the final verdict, which mitigates the risk of acting on embedded instructions.
Audit Metadata