speckit-git-commit
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell and PowerShell scripts located at
.specify/extensions/git/scripts/bash/auto-commit.shand.specify/extensions/git/scripts/powershell/auto-commit.ps1, passing an<event_name>variable as an argument. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Reads the hook event name from the execution context and configuration values from the local file
.specify/extensions/git/git-config.ymlmentioned in SKILL.md. - Boundary markers: Absent. No explicit delimiters or instruction boundaries are provided to prevent the agent from interpreting content within the configuration file or hook context as commands.
- Capability inventory: Performs broad file system staging via
git add ., executes commits, and triggers local script execution. - Sanitization: Absent. There is no mention of validation, escaping, or filtering for the event name or configuration message strings before they are incorporated into command-line executions.
Audit Metadata