commit

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard git commands (git status, git diff, git add, git commit). It includes explicit constraints to prevent the use of git add -A or git add ., which reduces the risk of accidentally staging and committing sensitive files like configuration secrets or private keys.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes repository content (diffs) to generate commit messages. It mitigates potential shell injection vulnerabilities that could arise from malicious content in the diffs by requiring the use of HEREDOC Syntax for passing commit messages to the shell.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 06:50 PM