refine
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs local shell command execution using
git diff main...HEAD --stat. This is used to identify files modified during the session and does not involve network activity or untrusted input.\n- [INDIRECT_PROMPT_INJECTION]: The skill reads project documentation and writes updates back to the repository, which creates a theoretical attack surface for indirect prompt injection.\n - Ingestion points: The agent reads the content of
docs/validation.md,docs/enterprise.md,docs/autonomous-mode.md, and various skill definitions (SKILL.md).\n - Boundary markers: There are no explicit delimiters or instructions to ignore potential commands embedded within the documentation files.\n
- Capability inventory: The skill is authorized to perform git command execution and file system write operations to apply documentation updates.\n
- Sanitization: The skill does not specify any sanitization or validation logic for the content being written to the documentation files.
Audit Metadata