commit-push
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git commands using the Bash tool. The execution environment is restricted to specific git subcommands through the allowed-tools configuration.
- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection surfaces by ingesting untrusted data from the local repository and user input.
- Ingestion points:
git diff --cachedand$ARGUMENTS(SKILL.md). - Boundary markers: Absent.
- Capability inventory:
git commitandgit push(SKILL.md). - Sanitization: The skill implements a mandatory user confirmation checkpoint (Step 3) where the proposed message must be reviewed and approved by the user before the commit and push commands are executed.
Audit Metadata