git-commit
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Git commands (
git diff,git add,git commit) via the Bash tool to facilitate version control tasks. - [INDIRECT_PROMPT_INJECTION]: The agent is instructed to analyze file diffs (untrusted data) to generate commit messages. While this is a potential ingestion surface for malicious content, the workflow is restricted to producing descriptive text for a Git commit.
- [SAFE]: The skill explicitly includes a Git Safety Protocol that prohibits destructive commands and reminds the agent to never commit sensitive files like
.env, credentials, or private keys.
Audit Metadata