commit-staged
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill executes shell commands using the exclamation-backtick syntax during initialization to gather repository context. Evidence includes
!uv run prek run >/dev/null 2>&1 || git add -u,!git --no-pager status || true,!git --no-pager diff --cached || true, and!git --no-pager diff --cached --stat || trueinSKILL.md. These commands fetch status and diffs, and may automatically stage tracked changes (git add -u) if theprektool fails. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted user input by interpolating
$ARGUMENTSinto the model prompt. Ingestion points: The$ARGUMENTSvariable is placed within<user_notes>tags inSKILL.md. Boundary markers: The input is wrapped in<user_notes>tags, providing structural separation but not complete protection against adversarial instructions. Capability inventory: The skill has the capability to executegit commitandgit addcommands based on instructions derived from the input. Sanitization: No explicit sanitization or instructions to ignore instructions within the user notes are present. - [COMMAND_EXECUTION]: The skill performs repository management operations using system commands. It is designed to invoke
git commitwith a generated message and usesuv runto execute linter or pre-commit tools likeprekandpre-commit.
Audit Metadata