git-commit
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard Git CLI commands to manage code changes.
- The agent is instructed to use
git status,git diff, andgit logto analyze repository state. - It performs write operations via
git addandgit committo modify the local repository. - In interactive mode, it performs network operations via
git pushto upload changes to remote servers, though this requires explicit user confirmation via theAskUserQuestiontool. - [INDIRECT_PROMPT_INJECTION]: The skill reads and interprets the content of code changes to generate commit messages, which presents a surface for indirect prompt injection.
- Ingestion points: Data enters the agent context through the output of
git status,git diff, andgit logas described inSKILL.md. - Boundary markers: The skill does not define specific delimiters for separating the untrusted code content from its own instructions.
- Capability inventory: The skill has the capability to modify the file system (
git add/commit) and access the network (git push). - Sanitization: No automated sanitization is performed, but the instructions explicitly direct the agent to manually review the changes for sensitive content (credentials, secrets, or
.envfiles) and halt the process if found.
Audit Metadata