commit
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill implements strict "Hard Safety Gates" that prioritize safety over generic instructions, specifically preventing accidental
git commit --amendor--no-verifyusage unless explicitly requested. - [SAFE]: Includes a "Push Gate" that defaults to no pushing and requires an explicit
pushflag, protecting against unauthorized remote updates. - [COMMAND_EXECUTION]: Employs sophisticated "Heredoc Safety Rules" (e.g., using
<<'EOF'in isolated shell calls) specifically designed to prevent command injection or accidental execution of malicious content within commit messages. - [SAFE]: Implements a history protection check (
git branch -r --contains HEAD) before allowing anamendoperation, ensuring that already-pushed commits are not accidentally rewritten. - [SAFE]: Utilizes "Staging Gates" to prevent accidental addition of files (
git add -A) when specific context or existing staged changes are present.
Audit Metadata