bagisto-git-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and analyze existing repository data, such as commit history and the CHANGELOG.md file, to match established conventions. This ingestion of potentially untrusted or external data creates a surface for indirect prompt injection. \n
- Ingestion points: Git commit history (last 200 commits), CHANGELOG.md. \n
- Boundary markers: Absent. \n
- Capability inventory: Git operations (branching, committing, pull request management), dependency management (Composer/npm). \n
- Sanitization: Absent. \n- [SAFE]: The skill explicitly includes security rules that forbid the commitment of credentials, environment files (.env), and build artifacts, which is a standard safety measure for repository management.
Audit Metadata