commit
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard version control commands such as
git diff,git add, andgit committo automate the repository management workflow. These commands are executed locally and are central to the skill's primary function of streamlining commits.- [DATA_EXFILTRATION]: Includes agit pushcommand as an optional step to synchronize the local repository with a remote server. This is a standard development practice and is only triggered when explicitly requested by the user via the--pushflag.- [PROMPT_INJECTION]: The skill processes content from staged changes usinggit diff(Step 1) to provide context for the AI model. While this creates a surface for indirect prompt injection from codebase content, the risk is effectively mitigated by the manual review step (Step 3), which requires the user to confirm or edit the generated message before capabilities likegit commit(Step 4) orgit push(Step 5) are executed.
Audit Metadata