commit-detection

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes output from git diff commands. While this data originates from repository files that could be influenced by external actors, the skill utilizes it strictly for keyword matching and file categorization. It lacks evidence of interpolating this content into a context that could override agent instructions.
  • [COMMAND_EXECUTION]: The skill utilizes local shell commands (git, grep) to perform its primary function of change detection. These operations are consistent with the skill's stated purpose and are restricted to the local development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 06:13 AM