commit-messages
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from git diffs, commit history, and GitHub API responses, which can be manipulated to influence agent behavior.
- Ingestion points: The agent ingests external data through
git diff --staged,git log origin/main..HEAD, andgit diff origin/main...HEAD(found in SKILL.md). - Boundary markers: There are no explicit instructions or delimiters provided to the agent to differentiate between the instructions in the skill and potentially malicious content found within the code diffs or commit messages being analyzed.
- Capability inventory: The skill utilizes
gitandghcommand-line tools to interact with the local repository and the GitHub API (found in SKILL.md). - Sanitization: The skill does not implement any validation, escaping, or sanitization of the content retrieved from the repository history before it is processed by the AI model.
Audit Metadata