cbeams-git-commit-messages
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (diffs, patches, or summaries) which is a potential vector for indirect prompt injection. However, the skill has no dangerous capabilities, and the impact is limited to the generated text output.
- Ingestion points: Step 1 of the procedure involves analyzing user-provided diffs, patches, or summaries of changes.
- Boundary markers: The instructions do not specify the use of clear delimiters or boundary markers to separate the untrusted diff content from the instructions.
- Capability inventory: The skill is limited to text generation and does not utilize any tools for network communication, file system modification, or command execution.
- Sanitization: There are no explicit steps for sanitizing or escaping the content of the diffs before they are processed by the agent.
Audit Metadata