discuss-multi-ai

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute local git commands including git show, git diff, and git status to inspect project history and the current state of the repository.- [INDIRECT_PROMPT_INJECTION]: The skill processes data from git commits and diffs which can contain untrusted content if the repository includes code from external sources.
  • Ingestion points: Git commit messages and source code diffs retrieved via git show and git diff in the SKILL.md workflow.
  • Boundary markers: The instructions lack specific delimiters or negative constraints to prevent the agent from following instructions that might be embedded within the code changes being reviewed.
  • Capability inventory: The agent has the capability to modify source code, write new documentation files to the docs/discuss-ai/ directory, and perform git commits as part of the automated workflow.
  • Sanitization: There is no evidence of sanitization or filtering of the content read from git before it is analyzed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 08:16 AM
Security Audit — agent-trust-hub — discuss-multi-ai