git-commit-doc

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to execute the git commit command to finalize changes. This action is a core functionality of the skill and is strictly gated by a mandatory user confirmation step in the interaction flow.
  • [PROMPT_INJECTION]: The skill reads output from git diff, creating a surface for indirect prompt injection if the code changes contain malicious instructions in comments or strings. However, the risk is mitigated by the fact that the agent's output is reviewed by the user before execution. 1. Ingestion points: staged and working tree diffs (SKILL.md). 2. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present. 3. Capability inventory: Command execution via git commit (SKILL.md). 4. Sanitization: No specific sanitization or filtering of the diff content is implemented.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 07:22 AM