commit
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a standard workflow for managing Git commits within a local repository. The instructions prioritize repo-style consistency and atomic grouping.
- [COMMAND_EXECUTION]: The skill uses standard Git commands (git add, git commit, git log, git status) to manage local changes. These are applied to local file paths and require explicit file naming, which is consistent with standard development practices and includes explicit rules against pushing to remote servers.
- [INDIRECT_PROMPT_INJECTION]: The skill has an inherent surface for indirect prompt injection by processing external data from git logs and diffs.
- Ingestion points: git logs and diffs (Workflow steps in SKILL.md).
- Boundary markers: Absent.
- Capability inventory: git add and git commit (SKILL.md).
- Sanitization: Absent. The potential impact is mitigated by the skill's limited local scope and the requirement for explicit user-requested grouping.
Audit Metadata