commit
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes a bridge script (
scripts/invoke.py) that dynamically determines the path to a central management engine (kntnt) by searching various agent-specific configuration directories (e.g.,~/.claude/skills,~/.cursor/skills,~/.codeium/windsurf/skills). It then executes this engine usinguv runto process the skill's logic. - [COMMAND_EXECUTION]: The skill performs file system and repository operations using
gitanduv. It executes commands to plan commits, apply changes, and inspect repository status viagit diffand logs. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the working tree (such as
CHANGELOG.mdentries andgit diffoutput) and accepts user-provided instructions via the-- <instruction>syntax, which are then passed to the manager engine. - Ingestion points: User input from stdin,
CHANGELOG.mdcontent, andgit diffoutput. - Boundary markers: The skill documentation defines a reserved
--separator to distinguish between formal arguments and natural language instructions. - Capability inventory: The skill has the ability to write to the repository (
.gitignore,CHANGELOG.md) and execute shell commands via theuvandgitbinaries. - Sanitization: Content is processed by a central manager engine designed for these specific workflows, which manages the interpolation of data into commit messages and changelogs.
Audit Metadata