git-activity
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/git-activity.shperforms local operations usinggit,jq, anddate. It accesses user-specified directories to retrieve commit history. - [INDIRECT_PROMPT_INJECTION]: The skill ingests git commit messages (external data) and stores them in JSON format. This creates a surface for indirect prompt injection where malicious instructions inside commit messages could affect subsequent AI analysis.
- Ingestion points: The skill uses
git loginscripts/git-activity.shto extract subjects and bodies of commits. - Boundary markers: Output is stored in structured
log.jsonfiles. - Capability inventory: The skill can read local repository history and write to the filesystem at
~/.cache/recap/git/. - Sanitization: Content is escaped for JSON using
jq, but no semantic filtering is applied to the commit text.
Audit Metadata