commit-work
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard developer workflow for git version control. It promotes security by requiring a manual review of staged changes and specifically checking for the presence of hardcoded secrets, tokens, or accidental debug logs.
- [INDIRECT_PROMPT_INJECTION]: The skill reads project files via git commands to identify changes, which creates a theoretical attack surface where malicious instructions could be embedded in the code being committed. This is an inherent functional requirement for the skill's operation.
- Ingestion points:
git statusandgit diffcommands inSKILL.mdandREADME.md. - Boundary markers: Absent; the agent processes raw git output.
- Capability inventory:
git commitand project-specific verification commands (lint, test, build) as described inSKILL.md. - Sanitization: None; the skill is designed to accurately commit the user's local modifications.
Audit Metadata