commit-and-push
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads repository state and diffs which are untrusted data sources that could contain malicious instructions.\n
- Ingestion points: Output from
git statusandgit diffis read into the agent's context inSKILL.md.\n - Boundary markers: The instructions do not use specific delimiters to separate the diff content from the agent's instructions.\n
- Capability inventory: The skill uses
bashto executegit add,git commit, andgit pushcommands.\n - Sanitization: There is no sanitization of the diff content before it is processed by the agent.\n- [COMMAND_EXECUTION]: The skill utilizes the
bashtool to run standard version control commands.\n - Evidence includes the execution of
git status,git diff,git add,git commit, andgit pushto manage the repository and synchronize with the remoteorigin.
Audit Metadata