git-visual-squash-summary
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is dedicated to providing read-only git summaries. It contains explicit instructions to never mutate the repository state (e.g., no staging, committing, or rebasing). All identified git commands (
git status,git rev-parse,git merge-base,git diff,git log) are standard for inspecting repository state and do not pose a security risk in this context. - [DATA_EXPOSURE]: No evidence of sensitive file access or hardcoded credentials was found. The skill instructions specifically advise against creating repo-local scratch files for diffs or logs to maintain a clean and secure environment.
- [REMOTE_CODE_EXECUTION]: There are no patterns suggesting the download or execution of remote scripts. The skill relies entirely on local
gitbinaries and the agent's internal logic. - [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted data from git logs and diffs (Category 8 surface), the risk is mitigated by its strict read-only nature and the highly constrained output format (emoji-first summary lines). The skill does not have capabilities to write files or perform network requests based on the ingested data.
- [OBFUSCATION]: Analysis of the markdown and reference files revealed no hidden characters, homoglyphs, or encoded payloads. All URLs and instructions are in plain text and consistent with the stated purpose of the skill.
Audit Metadata