git-log
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard Git workflow documentation and utility scripts for software version control management.
- [COMMAND_EXECUTION]: The
scripts/git_helper.pyscript executes Git commands using thesubprocessmodule. This is the intended core functionality of the skill and is implemented following safe practices by passing arguments as a list to thegitexecutable, avoiding shell injection vulnerabilities. - [PROMPT_INJECTION]: The skill identifies an indirect prompt injection attack surface as it processes output from external Git commands (such as commit messages, branch names, and file statuses) which could potentially contain malicious instructions intended for the agent.
- Ingestion points: The
scripts/git_helper.pyscript reads and displays output fromgit statusandgit logcommands. - Boundary markers: Absent. The instructions do not define specific markers to delimit Git-sourced data from agent instructions.
- Capability inventory: The skill and its associated scripts can perform
git add,commit,push,checkout, andmergeoperations across the project repository. - Sanitization: Absent. No explicit sanitization or validation of the Git command output is performed before it is processed by the agent.
Audit Metadata