git-conventional-commit
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard version control commands including
git status,git diff,git log,git add, andgit commit. These operations are central to the skill's primary purpose of managing local repository changes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local source code changes via
git diff. The agent is instructed to analyze these changes to generate commit messages. - Ingestion points: Untrusted data enters the context through the output of
git diffandgit statuscommands inSKILL.md. - Boundary markers: The instructions include a specific security check: "Check for sensitive files (.env, credentials, secrets) and warn before staging."
- Capability inventory: The skill has the capability to write to the repository using
git addandgit commitas defined inSKILL.md. - Sanitization: The skill implements a manual sanitization step by requiring the agent to warn the user if sensitive patterns are detected in the diffs before proceeding with staging.
Audit Metadata