commit-detection
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes output from
git diffcommands. While this data originates from repository files that could be influenced by external actors, the skill utilizes it strictly for keyword matching and file categorization. It lacks evidence of interpolating this content into a context that could override agent instructions. - [COMMAND_EXECUTION]: The skill utilizes local shell commands (
git,grep) to perform its primary function of change detection. These operations are consistent with the skill's stated purpose and are restricted to the local development environment.
Audit Metadata