commit
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard instructional content for git workflows without any detected security threats.
- [COMMAND_EXECUTION]: The skill uses standard git commands (git add, git diff, git commit) appropriate for its stated purpose of managing commits.
- [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow that involves reading local project documentation (e.g., CONTRIBUTING.md, README.md) to determine commit guidelines. This represents a potential indirect prompt injection surface. Evidence: 1. Ingestion points: local files such as README.md, CONTRIBUTING.md, and .gitmessage. 2. Boundary markers: The skill includes a clear instruction to prioritize project-local guidance over its own. 3. Capability inventory: Includes git staging, diffing, and committing. 4. Sanitization: None explicitly defined. The surface is low-risk and standard for developer-oriented AI agent operations.
Audit Metadata