commit
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard git binaries (
git status,git diff,git add,git commit) to manage repository state as part of its primary functionality. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface that could be used for indirect prompt injection, though the implementation follows mitigation best practices:
- Ingestion points: Untrusted data from the local repository is read via
git statusandgit diffto help the agent formulate commit messages. - Boundary markers: In
references/coauthor-attribution.md, the skill uses a quoted HEREDOC (cat <<'EOF') when constructing multi-line commit messages. - Capability inventory: The skill has the capability to write to the repository history via
git commitandgit add. - Sanitization: The use of a quoted HEREDOC (
'EOF') is a strong sanitization measure that ensures the generated commit message is treated as a literal string by the shell, preventing the execution of any commands that might be embedded in the diff content or commit summary.
Audit Metadata