qa-checklist
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Employs standard
gitcommands (git fetch,git diff) to inspect repository changes. These operations are performed within the local repository context and do not require elevated privileges.\n- [PROMPT_INJECTION]: The skill processes untrusted code changes viagit diff, creating an indirect prompt injection surface. However, the risk is minimal as the skill's capabilities are limited to generating a markdown checklist.\n - Ingestion points: Data is read from the output of the
git diffcommand into the agent's context.\n - Boundary markers: No specific delimiters or safety instructions are used to separate the diff content from the system prompt.\n
- Capability inventory: The skill only generates text and does not have tools for executing code, writing to the file system, or making network requests based on the analyzed content.\n
- Sanitization: No sanitization is performed on the diff output before analysis.
Audit Metadata