discuss-multi-ai
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local
gitcommands includinggit show,git diff, andgit statusto inspect project history and the current state of the repository.- [INDIRECT_PROMPT_INJECTION]: The skill processes data from git commits and diffs which can contain untrusted content if the repository includes code from external sources. - Ingestion points: Git commit messages and source code diffs retrieved via
git showandgit diffin theSKILL.mdworkflow. - Boundary markers: The instructions lack specific delimiters or negative constraints to prevent the agent from following instructions that might be embedded within the code changes being reviewed.
- Capability inventory: The agent has the capability to modify source code, write new documentation files to the
docs/discuss-ai/directory, and perform git commits as part of the automated workflow. - Sanitization: There is no evidence of sanitization or filtering of the content read from git before it is analyzed by the agent.
Audit Metadata