git-commit

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local shell commands to perform git operations including git add ., git diff --staged, git commit, and git log. These are standard version control operations consistent with the skill's stated purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local filesystem via git diff --staged. While this data is used to reason about and generate commit messages, the skill implements a 'CRITICAL SAFETY PROTOCOL' that mandates a human-in-the-loop confirmation step before any permanent changes are committed to the repository, effectively mitigating the risk of unauthorized actions triggered by malicious content in the diff.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 04:46 AM
Security Audit — agent-trust-hub — git-commit