git-submodule
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to execute standard Git CLI commands and filesystem operations (e.g.,
rm -rf .git/modules/) necessary for submodule management.\n- [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface where untrusted user input (URLs, paths) is interpolated into shell commands.\n - Ingestion points: Repository URLs, directory paths, and branch names in SKILL.md.\n
- Boundary markers: No delimiters or ignore instructions are provided for these variables.\n
- Capability inventory: Shell execution capabilities for Git and file management are documented across SKILL.md.\n
- Sanitization: No input validation or sanitization steps are included in the provided instructions.
Audit Metadata