git-commit-writer-free
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard git commands (
git status,git diff) to inspect the state of the local repository. These commands are necessary for the skill's primary function and do not pose a security risk in this context. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data in the form of git diff patches.
- Ingestion points: The output of
git diff --cachedinSKILL.md. - Boundary markers: None present; the agent is not explicitly told to ignore instructions that might be contained within code comments in the diff.
- Capability inventory: The skill is limited to reading repository status and diffs; it lacks capabilities for network access or arbitrary file writing.
- Sanitization: None present.
- While the skill ingests external data, the risk is negligible due to the absence of dangerous downstream capabilities.
Audit Metadata