conventional-commits
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses shell command placeholders in SKILL.md to retrieve git diffs and commit logs. These are benign operations intended to provide necessary context for generating commit messages.
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from the repository's git history and staged changes.
- Ingestion points: git diff and log outputs in SKILL.md.
- Boundary markers: the output is wrapped in live_context tags.
- Capability inventory: git command access via the Bash tool.
- Sanitization: no explicit sanitization of the git command output is present.
Audit Metadata