git-commit
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands to perform git operations including
git add .,git diff --staged,git commit, andgit log. These are standard version control operations consistent with the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local filesystem via
git diff --staged. While this data is used to reason about and generate commit messages, the skill implements a 'CRITICAL SAFETY PROTOCOL' that mandates a human-in-the-loop confirmation step before any permanent changes are committed to the repository, effectively mitigating the risk of unauthorized actions triggered by malicious content in the diff.
Audit Metadata