explain-diff-html
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external, untrusted data such as code diffs and PR content to generate explainers, which creates a surface for indirect prompt injection.
- Ingestion points: Code diffs, branch data, and PR content are ingested through the agent context.
- Boundary markers: The skill does not provide specific delimiters to separate the external content from the core instructions.
- Capability inventory: The skill allows writing the generated output to the /tmp directory.
- Sanitization: No sanitization or validation of the ingested content is specified.
- [COMMAND_EXECUTION]: The skill instructs the agent to save generated content to the local file system at the
/tmplocation. This is used for creating time-sorted temporary files outside of the repository's version control.
Audit Metadata