commit
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands including
git status,git diff,git commit,git reset, andgit applyto manage the repository state. These are standard operations for a version control helper skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository via
git diff --stagedto generate commit messages. - Ingestion points:
SKILL.md(Workflow Step 2, Split Workflow Step 1) reads staged diffs. - Boundary markers: Not explicitly defined in the prompt instructions to the agent.
- Capability inventory: Shell command execution via
gitCLI. - Sanitization: No specific filtering of diff content is implemented; however, the impact is limited by the requirement for user approval before committing.
Audit Metadata