push
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Git commands (git status, git diff, git commit, git push) for version control. These commands are appropriately scoped to the skill's purpose and are restricted via the allowed-tools configuration in the frontmatter.
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context placeholders (!
command) to populate the prompt with current repository information at load time. These commands are static and do not involve user-supplied argument injection or unauthorized network activity. - [INDIRECT_PROMPT_INJECTION]: The skill reads external data from the codebase through git diff and git log. While this presents an indirect prompt injection surface where a malicious file content could attempt to influence the agent, the skill's capabilities are limited to Git operations, and it does not possess high-risk execution or exfiltration tools.
- [DATA_EXPOSURE]: The skill instructions explicitly warn the agent to skip sensitive files such as .env when staging changes, following security best practices for credential management.
Audit Metadata