git-master-architect
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill handles untrusted data from Git diffs and implements measures to prevent indirect prompt injection. * Ingestion points: Untrusted code content enters via 'git diff' and 'git diff --staged' commands in SKILL.md. * Boundary markers: The skill mandates wrapping untrusted content within '<git_diff>' tags. * Capability inventory: The agent can execute shell commands using the 'git' CLI (e.g., commit, branch, status). * Sanitization: Instructions explicitly command the agent to treat diff content as data and to report injection attempts.
- [COMMAND_EXECUTION]: The 'smoke_test.py' script executes 'git --version' via 'subprocess.run'. This is a static, safe command used for environment verification and does not incorporate user-provided input.
- [SAFE]: The skill includes proactive security checks to prevent the accidental exposure of sensitive files like '.env' or SSH keys by scanning the Git staging area before commits.
Audit Metadata