git-commit-helper
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute local git commands to retrieve change information. - Evidence:
git diff --staged --name-onlyandgit diff --stagedare executed to analyze code changes inSKILL.md. - [EXTERNAL_DOWNLOADS]: The skill documentation indicates a potential requirement for network access to interact with the GitHub API.
- Evidence: Mentions
api.github.comin the Sandbox configuration section ofSKILL.mdfor fetching issue details and validating issue numbers. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data (git diffs) which could contain embedded instructions intended to manipulate the commit message generation.
- Ingestion points: The output of
git diff --stagedis ingested into the agent context as described inSKILL.md. - Boundary markers: Absent; there are no specific instructions or delimiters mentioned to isolate the diff content from the agent's instructional logic.
- Capability inventory: The skill utilizes
BashandReadtools to interact with the filesystem and execute repository commands. - Sanitization: Absent; the skill does not specify any filtering or escaping of the code diff content before processing.
Audit Metadata