review-fix-commit
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands for repository management and testing, such as
git diff,git commit, and the project's test suite. These operations are essential to the skill's primary function as a developer productivity tool. - [INDIRECT_PROMPT_INJECTION]: The skill reviews external content in the form of code changes which acts as an ingestion point for untrusted data. However, the risk is mitigated by the requirement for user confirmation before pushing and the instruction to stay within the review scope.
- Ingestion points: Code changes retrieved via
git diff(SKILL.md). - Boundary markers: Absent; the agent reads the diff output directly.
- Capability inventory: File modification, Git operations (commit, push), and test suite execution (SKILL.md).
- Sanitization: No explicit sanitization of diff content is mentioned.
Audit Metadata