commit
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses git commands like
status,diff,add, andcommitto manage code changes. - [INDIRECT_PROMPT_INJECTION]: The skill generates commit messages by analyzing potentially untrusted code diffs.
- Ingestion points: Data from
git diffis read into the agent's context as specified in SKILL.md. - Boundary markers: There are no instructions to the agent to treat diff content as data only.
- Capability inventory: The skill executes git commands as detailed in SKILL.md.
- Sanitization: There is no process for filtering or sanitizing the input from the repository's files.
Audit Metadata