git-style-commit
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several shell commands to interact with the local repository, including
git log,git diff,git add, andgit commit. These are necessary for the skill's primary function but involve direct shell interaction. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes external data in the form of repository commit history (
git log) and pending file changes to determine its behavior (style and message generation). This represents a vulnerability surface where malicious content in the history could influence the agent's output. - Ingestion points: Data enters the context via
git log -n 15andgit diffas described in SKILL.md. - Boundary markers: There are no explicit delimiters or instructions to ignore malicious patterns within the ingested Git history.
- Capability inventory: The skill has the capability to execute shell commands (
git add,git commit) as seen in the Execution Steps. - Sanitization: No sanitization or filtering of the Git log output is performed before it is used to draft commit messages.
Audit Metadata