validator-commit
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using the
Bashtool, specificallyagent-validateandgit commit. These operations are fundamental to the skill's purpose of validating and versioning code changes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user data via the
$ARGUMENTSvariable and processes output from theagent-validatetool to determine its execution flow. This creates a surface where specifically crafted inputs could attempt to influence the agent's logic or command construction. - Ingestion points: User input provided through
$ARGUMENTS(SKILL.md) and tool output fromagent-validate(SKILL.md). - Boundary markers: There are no explicit delimiters or instructions to the agent to ignore embedded commands within the interpolated
$ARGUMENTSor tool outputs. - Capability inventory: The skill possesses the capability to execute arbitrary shell commands and modify the file system via
git(SKILL.md). - Sanitization: The instructions do not describe any sanitization, escaping, or strict validation of the
$ARGUMENTScontent before it is used for logic branching or interpolated intogit commitcommands.
Audit Metadata