git-commit
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes external data (code diffs) which may contain malicious instructions designed to influence the agent's behavior during the commit process.
- Ingestion points:
SKILL.md(the skill usesgit diffandgit diff --cachedto ingest code changes into the agent's context). - Boundary markers: Absent (there are no instructions to the agent to disregard instructions found within the code changes being reviewed).
- Capability inventory:
SKILL.md(the agent is authorized to executegit add -Aand is instructed to run shell-based tools for linting, type-checking, and testing to resolve errors). - Sanitization: Absent (the skill does not define filters or sanitization for the content of the diffs).
Audit Metadata