git-daily-note-updater
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the analysis of git history.
- Ingestion points: The skill ingests untrusted data from
git logandgit show(specifically commit messages and diff contents) inSKILL.md(Step 2 and Step 3). - Boundary markers: Absent. There are no instructions or delimiters defining the start and end of untrusted content, nor instructions to the agent to ignore any embedded directives within that data.
- Capability inventory: The skill utilizes shell execution (git, cat, cd) and file system write access to update user-specified note files.
- Sanitization: Absent. No filtering or escaping is applied to the git data before processing.
- [COMMAND_EXECUTION]: The skill relies on shell command execution to perform its primary function.
- Evidence: Use of
git log,git show,git reflog,cat, andcdcommands withinSKILL.mdworkflows. - Context: These are standard operations for a git analysis tool and are used here to retrieve and verify commit history.
Audit Metadata