git-commit

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill processes untrusted data from the repository's local environment through its diff analysis workflow. \n- Ingestion points: Instructions in SKILL.md require the agent to read output from git diff and git status. \n- Boundary markers: The skill does not define specific delimiters or "ignore previous instructions" warnings to wrap the diff content, leaving the agent susceptible to instructions embedded in the code changes. \n- Capability inventory: The skill possesses the capability to execute shell commands (git add, git commit) based on its analysis of these diffs. \n- Sanitization: No explicit sanitization or filtering logic is provided to handle the content of the diffs before analysis. \n- [COMMAND_EXECUTION]: The skill utilizes the Shell tool to run standard git operations, including git status, git diff, git add, and git commit. These operations are consistent with the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 09:57 AM