rearrange
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Git commands to analyze and modify repository history. While intended for benign reorganization, history rewriting is a high-impact operation. The skill provides safety guidance by instructing the agent to confirm actions and create backups.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from Git history.\n
- Ingestion points: Commit messages and file diffs via 'git log' commands in SKILL.md.\n
- Boundary markers: Absent. There are no delimiters to separate Git content from agent instructions.\n
- Capability inventory: High-impact Git operations (reordering, squashing, editing commits).\n
- Sanitization: Absent. No sanitization or validation is performed on the data retrieved from Git.
Audit Metadata