linearize-commits
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from git logs and diffs while possessing significant repository modification capabilities.
- Ingestion points: The skill reads commit messages and file diffs using
git log,git show --stat, andgit diffas described in the 'Work Flow' section. - Boundary markers: Mandatory plan confirmation ('方案必须先展示给用户确认再执行') and final consistency validation ('git diff <备份引用> HEAD') act as human and automated checkpoints.
- Capability inventory: The agent is instructed to use
git rebase,git commit,git reset --hard, andgit push --force-with-lease. - Sanitization: The skill enforces a specific output format (
type(scope): 描述), but does not explicitly sanitize the content retrieved from the history. - [COMMAND_EXECUTION]: The skill executes high-privilege and potentially destructive git commands to modify local and remote history.
- Evidence: Explicit instructions to use
git reset --hard,git branch -Dfor cleanup, andgit push --force-with-leasefor remote updates. - [DYNAMIC_EXECUTION]: The skill involves generating and running dynamic scripts to automate the rebase editor process.
- Evidence: The instructions recommend using
node -eor shell scripts to programmatically set theGIT_SEQUENCE_EDITORenvironment variable for non-interactive rebase operations.
Audit Metadata