pr-diff-verification
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from git logs and commit messages to verify claims, which represents a theoretical injection surface.
- Ingestion points: The agent parses output from
git show,git log, andgit diffto extract concrete claims as described inSKILL.md. - Boundary markers: None; the skill relies on the agent's ability to selectively extract specific text patterns like "modifies X" or "adds Y".
- Capability inventory: The skill uses
Bashto executegitcommands inSKILL.md. - Sanitization: None; the agent evaluates raw commit log text.
- [EXTERNAL_DOWNLOADS]: The skill references authoritative documentation from well-known technology services.
- Evidence: Links to
git-scm.com(official Git site) andcode.claude.com(Anthropic developer portal) provided inreferences/official-docs.md. - [SAFE]: The skill implements standard developer safety checks to prevent common errors like pushing the wrong branch or losing work during rebases. No malicious code, obfuscation, or unauthorized access patterns were found.
Audit Metadata