commit-with-context
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the
!command`` syntax withinSKILL.mdto execute shell commands and populate the agent's context immediately upon loading. - Evidence: The skill executes
git status --short,git diff --cached,git diff,git branch --show-current, andgit log -5 --format='%h%n%s%n%b%n---'. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from
git diffandgit log, which may contain untrusted content from external contributors or malicious code changes. - Ingestion points: Data enters the context via the dynamic execution of git commands in
SKILL.md. - Boundary markers: No delimiters or specific instructions are provided to the agent to ignore potential instructions embedded within the source code diffs or previous commit messages.
- Capability inventory: The skill empowers the agent to perform
git stageandgit commitoperations based on the analyzed content. - Sanitization: There is no evidence of sanitization or filtering of the ingested git output before it is processed by the agent.
- [COMMAND_EXECUTION]: The skill executes local shell commands and a bundled bash script (
scripts/loc.sh) to perform its primary functions. - Evidence:
SKILL.mdinstructs the agent to create commits and verify them using git commands, and thescripts/loc.shutility is provided to calculate lines of code changes for the commit message body.
Audit Metadata