git4d-runtime
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/git4d_runtime_check.pyexecutes diagnostic commands such asgit,nvidia-smi,nvcc, andsysctlto gather environment information. These operations are implemented using safe subprocess list patterns, preventing command injection. - [PROMPT_INJECTION]: The skill processes external data from the Git history (commit subjects and author names) to create a graph visualization, which represents an indirect prompt injection surface.
- Ingestion points:
scripts/git4d_runtime_check.pyextracts data from localgit logoutput. - Boundary markers: Absent; commit messages are processed without explicit delimiters to distinguish them from instructions.
- Capability inventory: The agent has access to
bash,read_file, andwritetools via theagents/openai.yamlconfiguration. - Sanitization: Commit data is structured into JSON before being provided to the agent, providing a layer of structural isolation.
Audit Metadata