git-commit-message
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted data from staged local files to generate commit messages.
- Ingestion points: Local file content via
git diff --cached. - Boundary markers: No delimiters or explicit instructions are provided to the agent to treat the diff content as untrusted data.
- Capability inventory: The skill uses
git statusandgit difffor data ingestion; it has no file-write, network, or arbitrary code execution capabilities. - Sanitization: There is no evidence of sanitization or filtering of the input content before interpolation into the prompt.
Audit Metadata