git-submodule

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical guide for using standard Git submodule commands. All bash commands and configuration examples are consistent with official Git documentation.
  • [INDIRECT_PROMPT_INJECTION]: As a tool for managing external dependencies, the skill inherently possesses a surface for indirect prompt injection if an agent processes untrusted content from a cloned repository.
  • Ingestion points: The skill uses git clone, git submodule add, and git submodule update to fetch external data into the local environment.
  • Boundary markers: Absent; the skill does not explicitly instruct the agent to use delimiters or ignore instructions within submodules.
  • Capability inventory: The skill has access to Bash for command execution and Write for file system modifications.
  • Sanitization: Absent; the skill assumes repositories are trusted by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 09:09 AM