commit
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes file diffs and contents to generate commit messages, creating an attack surface for indirect prompt injection where instructions embedded in code could influence the agent.
- Ingestion points: File diffs and content read via
git diffand theReadtool. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the workflow.
- Capability inventory: Includes
Bash,Read,Glob, andGreptools as specified inSKILL.md. - Sanitization: No sanitization or validation is performed on the code content being analyzed.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executegitcommands, includinggit commit -musing messages derived from analyzed content.
Audit Metadata