commit
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard shell-based Git commands (git status, git diff, git log, git commit) to manage local version control. These operations are essential for its primary function.
- [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection (Category 8) by ingesting untrusted data from the local repository.
- Ingestion points: Staged file changes and recent commit history are read into the agent context via
git diff --cachedandgit login SKILL.md. - Boundary markers: Absent; the instructions do not implement delimiters or warnings to ignore instructions embedded in the code being committed.
- Capability inventory: The skill allows the agent to modify the repository using
git commitas defined in SKILL.md. - Sanitization: No validation or sanitization is performed on the ingested code diffs before they are processed by the agent.
Audit Metadata