git-fix
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bash(git:*)tool to perform repository management tasks such asgit status,git log,git rebase, andgit merge. These operations are consistent with the skill's primary purpose and do not exceed the necessary scope. - [PROMPT_INJECTION]: The skill includes safety instructions that require explicit user approval for destructive actions like force pushing or resetting branches, which mitigates the risk of accidental or malicious data loss.
- [PROMPT_INJECTION]: The skill processes external data from git logs and file contents, creating an indirect prompt injection surface. This risk is inherent to the tool's core functionality and is mitigated by safety constraints.
- Ingestion points:
git logoutput and conflicted file contents processed inSKILL.md. - Boundary markers: No explicit delimiters are used to separate git output from instruction context.
- Capability inventory: Access to
Bash(git:*)for branch manipulation andReadfor file inspection. - Sanitization: No sanitization or filtering is performed on the ingested git data.
- [DATA_EXFILTRATION]: No network activity or access to sensitive local configuration files (e.g., SSH keys or cloud credentials) was detected. Temporary file storage is restricted to the local
/tmp/directory.
Audit Metadata