ci-commit
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill includes a directive to bypass user interaction and feedback. Evidence: 'IMPORTANT:
- never stop and ask for feedback from the user.' This instruction removes a human-in-the-loop safety check during the write process.
- [COMMAND_EXECUTION]: The skill executes git commands to modify the repository state. Evidence: Instructions to use 'git status', 'git diff', 'git add', and 'git commit' in SKILL.md.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection by processing untrusted session data without adequate sanitization or boundary markers. 1. Ingestion points: Conversation history (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: 'git add' and 'git commit' (SKILL.md). 4. Sanitization: Absent. This could allow malicious instructions embedded in the session history to influence which changes are staged and committed.
Audit Metadata