create-commit
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes local file content and metadata (via git status and diff) to generate commit messages, which could allow malicious content in the codebase to influence the agent's output.
- Ingestion points: Execution of
git status --shortand inspection of relevant file diffs as defined in the workflow. - Boundary markers: None specified to separate code content from instructions.
- Capability inventory: The skill utilizes git commands to stage files (
git add) and create commits (git commit). - Sanitization: No explicit sanitization or filtering of the diff content is mentioned before it is used to summarize changes.
Audit Metadata