yy-create-report
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with Git. It runs
git config user.nameandgit config user.emailto identify the author, andgit logto retrieve commit messages within a specified timeframe. These are standard operations for the skill's purpose. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes Git commit messages, which are external strings. If a commit message contained instructions designed to manipulate the AI, the agent might interpret them. However, the skill includes structured output contracts and categorization rules which provide a level of implicit boundary for the processing logic.
Audit Metadata