commit
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local file changes using
git diff. This introduces an attack surface where malicious instructions embedded in the code or comments could attempt to override the agent's behavior during the commit planning process. The skill includes a mandatory human confirmation step before executing any commits, which serves as a critical mitigation against this risk.
Audit Metadata