flow-commit
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard Git commands such as
git diff,git add, andgit committo manage repository changes. These operations are restricted to the local environment and intended for the skill's primary function of version control management. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by reading repository content which presents an attack surface for indirect prompt injection.
- Ingestion points: Reads the repository index and working tree contents via
git diff --cachedandgit diff(SKILL.md). - Boundary markers: There are no explicit delimiters or instructions for the agent to ignore instructions that might be embedded within the source code changes being inspected.
- Capability inventory: The agent has the capability to write to the repository using
git addandgit commit(SKILL.md). - Sanitization: No specific sanitization or content filtering is described for the data ingested from the repository before it is processed by the agent.
Audit Metadata