committing-scoped-changes
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git CLI commands and user-defined verification scripts to manage the repository and confirm changes.
- Evidence: The
scoped-commit-executor.mdsubagent is responsible for staging files, runninggit commit, and executing aVERIFICATION_HINT(such asnpm test) to ensure commit quality. - [EXTERNAL_DOWNLOADS]: The skill fetches technical documentation and stylistic guidelines from external URLs to assist with commit planning and Git mechanics.
- Evidence:
references/external-sources.mdcontains a list of URLs including official Git documentation (git-scm.com), Anthropic's engineering blog, and industry standard sites like conventionalcommits.org. - Security Control: The skill implements a progressive disclosure policy where subagents fetch these URLs and return only a one-line summary to the orchestrator, preventing potential prompt injection from external content into the main agent context.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface by processing untrusted data from the repository being managed.
- Ingestion points:
scoped-state-summarizer.mdreads Git diffs and local documentation files (viaCONTEXT_LOCATION). - Boundary markers: The skill does not explicitly use delimiters for repo content, but it uses a summary-first approach to avoid passing raw patches into the main context.
- Capability inventory: The skill can execute Git commands and verification scripts via the
scoped-commit-executor.mdsubagent. - Sanitization: The subagents are instructed to summarize behavioral changes rather than returning raw hunks or document text.
Audit Metadata