git-commit
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from the repository's local environment through its diff analysis workflow. \n- Ingestion points: Instructions in
SKILL.mdrequire the agent to read output fromgit diffandgit status. \n- Boundary markers: The skill does not define specific delimiters or "ignore previous instructions" warnings to wrap the diff content, leaving the agent susceptible to instructions embedded in the code changes. \n- Capability inventory: The skill possesses the capability to execute shell commands (git add,git commit) based on its analysis of these diffs. \n- Sanitization: No explicit sanitization or filtering logic is provided to handle the content of the diffs before analysis. \n- [COMMAND_EXECUTION]: The skill utilizes theShelltool to run standard git operations, includinggit status,git diff,git add, andgit commit. These operations are consistent with the skill's primary purpose.
Audit Metadata