git-submodule
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to generate and execute Git CLI commands (e.g.,
git submodule add,git submodule update --init --recursive) within a Bash environment. These commands are consistent with the skill's stated purpose of managing repository boundaries. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where untrusted data (user-provided repository URLs or file paths) is interpolated into shell commands. However, the instructions emphasize a 'safe operator flow' and a structured 'submodule_intake' process to maintain control over the generated commands.
- [DATA_EXPOSURE]: The skill references sensitive file paths such as
.gitmodulesand discusses CI/CD authentication strategies. It correctly uses GitHub Actions secret syntax (e.g.,${{ secrets.DEPLOY_KEY }}) rather than hardcoding actual credentials, following security best practices.
Audit Metadata