hackathon-git-master

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill processes untrusted terminal output which introduces a surface for indirect prompt injection.
  • Ingestion points: Untrusted data enters via the git_conflict_log input parameter in SKILL.md.
  • Boundary markers: No specific delimiters are used to wrap the input data to prevent it from being interpreted as instructions.
  • Capability inventory: The skill generates shell commands for Git management, including file checkouts and commits.
  • Sanitization: There is no evidence of sanitization or filtering applied to the git_conflict_log input.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 01:03 PM
Security Audit — agent-trust-hub — hackathon-git-master