commit
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Git commands (
git status,git diff,git log,git add,git commit) to manage local repository changes. These operations are scoped to the local environment and are performed upon user request. - [DATA_EXFILTRATION]: No network-enabled operations or exfiltration patterns were detected. The skill includes explicit instructions to avoid staging or committing sensitive files such as
.env,credentials.json, or other secrets, which aligns with security best practices. - [PROMPT_INJECTION]: The instructions are functional and restricted to the git workflow. No attempts to bypass safety filters or override core agent behavior were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill reads external data (file content via
git diff). While this presents a theoretical attack surface where malicious instructions in a file could influence the agent, the risk is inherent to the tool's primary purpose and the skill does not possess high-risk capabilities like network access or arbitrary code execution that could be exploited.
Audit Metadata