flow-commit

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard Git commands such as git diff, git add, and git commit to manage repository changes. These operations are restricted to the local environment and intended for the skill's primary function of version control management.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by reading repository content which presents an attack surface for indirect prompt injection.
  • Ingestion points: Reads the repository index and working tree contents via git diff --cached and git diff (SKILL.md).
  • Boundary markers: There are no explicit delimiters or instructions for the agent to ignore instructions that might be embedded within the source code changes being inspected.
  • Capability inventory: The agent has the capability to write to the repository using git add and git commit (SKILL.md).
  • Sanitization: No specific sanitization or content filtering is described for the data ingested from the repository before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 02:12 PM