skills/unlearndev/skills/qa-checklist/Gen Agent Trust Hub

qa-checklist

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Employs standard git commands (git fetch, git diff) to inspect repository changes. These operations are performed within the local repository context and do not require elevated privileges.\n- [PROMPT_INJECTION]: The skill processes untrusted code changes via git diff, creating an indirect prompt injection surface. However, the risk is minimal as the skill's capabilities are limited to generating a markdown checklist.\n
  • Ingestion points: Data is read from the output of the git diff command into the agent's context.\n
  • Boundary markers: No specific delimiters or safety instructions are used to separate the diff content from the system prompt.\n
  • Capability inventory: The skill only generates text and does not have tools for executing code, writing to the file system, or making network requests based on the analyzed content.\n
  • Sanitization: No sanitization is performed on the diff output before analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 02:46 PM
Security Audit — agent-trust-hub — qa-checklist