commit-security-scan
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate developer tool designed for security auditing of local code changes using standard git workflows.
- [PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted source code, which constitutes an indirect prompt injection attack surface.
- Ingestion points: Source files resolved from git diff outputs as specified in SKILL.md.
- Boundary markers: Absent; there are no specific instructions or delimiters provided to distinguish analyzed code from the agent's operational instructions.
- Capability inventory: The skill utilizes git diff commands and local file reading within the repository scope.
- Sanitization: No sanitization of the analyzed source code content is performed prior to the agent's review.
Audit Metadata