commit
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the local system using standard git commands such as diff, log, and commit. This behavior is consistent with its primary purpose of managing repository state.- [SAFE]: The skill implements security best practices by including explicit instructions for the agent to avoid committing files that likely contain secrets, credentials, or local-only configuration.- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection through its ingestion of external data.
- Ingestion points: Staged file contents and git history are read via
git diff --cachedandgit log. - Boundary markers: No specific delimiters or safety instructions are used to separate untrusted repository data from the agent's logic.
- Capability inventory: The skill utilizes the
git commitcapability to modify the repository based on analyzed data. - Sanitization: No sanitization or validation of the retrieved repository content is performed prior to processing.
Audit Metadata