commit
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes standard Git CLI commands (
git status,git diff,git add,git commit,git push) to perform its primary function.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository's status and diffs. While this introduces an attack surface, the skill includes strong mitigation guidelines.\n - Ingestion points:
git status --short,git diff,git diff --stagedinSKILL.md.\n - Boundary markers: None defined for diff content.\n
- Capability inventory: Staging files (
git add), creating commits (git commit), and pushing to remote repositories (git push) inSKILL.md.\n - Sanitization: Includes specific instructions to avoid committing sensitive files (like
.env,.pem, and files containingsecretortoken) and to scan status for secrets before staging.
Audit Metadata