git-submodule
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for using standard Git submodule commands. All bash commands and configuration examples are consistent with official Git documentation.
- [INDIRECT_PROMPT_INJECTION]: As a tool for managing external dependencies, the skill inherently possesses a surface for indirect prompt injection if an agent processes untrusted content from a cloned repository.
- Ingestion points: The skill uses
git clone,git submodule add, andgit submodule updateto fetch external data into the local environment. - Boundary markers: Absent; the skill does not explicitly instruct the agent to use delimiters or ignore instructions within submodules.
- Capability inventory: The skill has access to
Bashfor command execution andWritefor file system modifications. - Sanitization: Absent; the skill assumes repositories are trusted by the user.
Audit Metadata