commit
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard git commands (
git status,git diff,git add,git commit). It includes explicit constraints to prevent the use ofgit add -Aorgit add ., which reduces the risk of accidentally staging and committing sensitive files like configuration secrets or private keys. - [INDIRECT_PROMPT_INJECTION]: The skill processes repository content (diffs) to generate commit messages. It mitigates potential shell injection vulnerabilities that could arise from malicious content in the diffs by requiring the use of HEREDOC Syntax for passing commit messages to the shell.
Audit Metadata