get-unpublished-changes
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill follows its stated purpose of summarizing code changes.
- [COMMAND_EXECUTION]: The skill uses
git diffto compare the current repository state with a published version tag. This operation is restricted to the local filesystem and is required for the skill's functionality. - [PROMPT_INJECTION]: The skill processes untrusted data in the form of git commit messages and diffs. While this represents an indirect prompt injection attack surface, the risk is low and typical for tools that summarize external text or code.
Audit Metadata