commit
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
bashtool to execute standard, local git commands such asgit status,git diff,git add, andgit commit. These operations are limited to the local environment and the current repository. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data by reading the output of
git diffandgit statusfrom the local filesystem. This is a necessary surface for the skill's primary function of committing code changes. - Ingestion points: Local file content and repository status via
git diffandgit statusinSKILL.md. - Boundary markers: None specified in the bash instructions.
- Capability inventory: The skill has access to the
bashtool to read files and execute git commands. - Sanitization: No specific sanitization or escaping of diff content is described; the skill relies on the agent's internal processing of command output.
Audit Metadata