git-expert
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands to manage Git repositories, including status checks (
git status), history inspection (git log), and maintenance tasks (git gc). These commands are necessary for the skill's primary function as a Git expert. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the repository environment (e.g., commit messages, file contents, and Git logs). While this presents a surface for indirect prompt injection where an attacker could place instructions in a commit message, the skill specifies structured strategies and validation steps that limit the risk of the agent deviating from its intended role.
- [SAFE]: The skill explicitly includes security-enhancing recommendations, such as using
git-secretsfrom the trusted AWS Labs organization to prevent credential leaks, and provides guidance on GPG signing for commit verification. All external links point to official documentation (git-scm.com, git-lfs.github.io) or established community tools (Husky, BFG Repo-Cleaner).
Audit Metadata