commit
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Git commands (
git add,git commit,git status,git log,git diff) as its primary mechanism for operation. These commands are executed within the local repository context to fulfill the user's request to group and commit changes.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and analyzes untrusted data from the repository's file system and history.\n - Ingestion points: The workflow in
SKILL.mdrequires the agent to review the full diff, repository status, and recent commit logs.\n - Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious instructions embedded within the code diffs or commit messages it analyzes.\n
- Capability inventory: The agent is authorized to execute
git addandgit commitbased on its analysis of the untrusted data.\n - Sanitization: The skill does not define any sanitization or filtering logic for the content it retrieves from the repository before processing it.
Audit Metadata