skills/kwoktung/skills/commit/Gen Agent Trust Hub

commit

Pass

Audited by Gen Agent Trust Hub on Mar 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed for a specific, non-destructive task and does not exhibit any malicious patterns or unauthorized behaviors.
  • [COMMAND_EXECUTION]: The skill uses git diff and git diff --cached to read the state of the repository. These commands are executed via bash but are restricted to read-only operations and are explicitly defined in the skill's allowed tools.
  • [PROMPT_INJECTION]: While the skill ingests untrusted data from git diffs (Indirect Prompt Injection surface), the potential impact is mitigated by the skill's lack of dangerous capabilities (like network or write access) and the strict formatting requirements for its output.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 19, 2026, 02:00 AM
Security Audit — agent-trust-hub — commit