git-log

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard Git workflow documentation and utility scripts for software version control management.
  • [COMMAND_EXECUTION]: The scripts/git_helper.py script executes Git commands using the subprocess module. This is the intended core functionality of the skill and is implemented following safe practices by passing arguments as a list to the git executable, avoiding shell injection vulnerabilities.
  • [PROMPT_INJECTION]: The skill identifies an indirect prompt injection attack surface as it processes output from external Git commands (such as commit messages, branch names, and file statuses) which could potentially contain malicious instructions intended for the agent.
  • Ingestion points: The scripts/git_helper.py script reads and displays output from git status and git log commands.
  • Boundary markers: Absent. The instructions do not define specific markers to delimit Git-sourced data from agent instructions.
  • Capability inventory: The skill and its associated scripts can perform git add, commit, push, checkout, and merge operations across the project repository.
  • Sanitization: Absent. No explicit sanitization or validation of the Git command output is performed before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 05:37 AM
Security Audit — agent-trust-hub — git-log