commit

Pass

Audited by Gen Agent Trust Hub on Mar 21, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard version control commands such as git diff, git add, and git commit to automate the repository management workflow. These commands are executed locally and are central to the skill's primary function of streamlining commits.- [DATA_EXFILTRATION]: Includes a git push command as an optional step to synchronize the local repository with a remote server. This is a standard development practice and is only triggered when explicitly requested by the user via the --push flag.- [PROMPT_INJECTION]: The skill processes content from staged changes using git diff (Step 1) to provide context for the AI model. While this creates a surface for indirect prompt injection from codebase content, the risk is effectively mitigated by the manual review step (Step 3), which requires the user to confirm or edit the generated message before capabilities like git commit (Step 4) or git push (Step 5) are executed.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 21, 2026, 02:42 AM
Security Audit — agent-trust-hub — commit