skills/fradser/dotclaude/commit/Gen Agent Trust Hub

commit

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the bash tool to execute standard, local git commands such as git status, git diff, git add, and git commit. These operations are limited to the local environment and the current repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data by reading the output of git diff and git status from the local filesystem. This is a necessary surface for the skill's primary function of committing code changes.
  • Ingestion points: Local file content and repository status via git diff and git status in SKILL.md.
  • Boundary markers: None specified in the bash instructions.
  • Capability inventory: The skill has access to the bash tool to read files and execute git commands.
  • Sanitization: No specific sanitization or escaping of diff content is described; the skill relies on the agent's internal processing of command output.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 11:53 PM