commit-and-push
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local repository (such as instructions in CONTRIBUTING.md or previous commit history) to inform its commit style and workflow.
- Ingestion points: SKILL.md workflow step 2 explicitly directs the agent to read repository instructions and inspect recent commit history.
- Boundary markers: The skill does not define specific boundary markers or delimiters for the content read from these repository files.
- Capability inventory: The skill possesses the capability to modify the local repository state through 'git commit' and 'git add', and to update remote branches via 'git push'.
- Sanitization: No explicit sanitization or validation of the repository-sourced text is performed before it is processed by the agent.
Audit Metadata