workflow-git-commit
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard Git commands (
git add,git diff,git commit,git status) that are appropriate for its purpose. It provides specific instructions to avoid dangerous variations likegit add .orgit add -A. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from
git diffandgit status. While this data could contain malicious instructions, the skill mitigates risk by using a quoted heredoc ('EOF') in the commit command, which prevents the shell from executing code embedded in the commit message text. Ingestion occurs inSKILL.mdvia diff commands; capabilities are limited to local commits; and explicit boundary instructions are provided to the agent to prevent unauthorized file access. - [DATA_EXFILTRATION]: The skill explicitly forbids network operations such as
git pushor opening Pull Requests, ensuring that code and metadata remain within the local environment.
Audit Metadata