git-commit-helper

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute local git commands to retrieve change information.
  • Evidence: git diff --staged --name-only and git diff --staged are executed to analyze code changes in SKILL.md.
  • [EXTERNAL_DOWNLOADS]: The skill documentation indicates a potential requirement for network access to interact with the GitHub API.
  • Evidence: Mentions api.github.com in the Sandbox configuration section of SKILL.md for fetching issue details and validating issue numbers.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data (git diffs) which could contain embedded instructions intended to manipulate the commit message generation.
  • Ingestion points: The output of git diff --staged is ingested into the agent context as described in SKILL.md.
  • Boundary markers: Absent; there are no specific instructions or delimiters mentioned to isolate the diff content from the agent's instructional logic.
  • Capability inventory: The skill utilizes Bash and Read tools to interact with the filesystem and execute repository commands.
  • Sanitization: Absent; the skill does not specify any filtering or escaping of the code diff content before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 05:24 AM