commit
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a git commit workflow using standard commands such as
git status,git diff, andgit commit. All operations are scoped to version control and follow best practices for handling overlapping changes in parallel sessions.- [INDIRECT_PROMPT_INJECTION]: The skill processes output fromgit diffandgit status, which represents an ingestion surface for potentially untrusted data from the codebase. However, the skill's capabilities are restricted to version control operations (staging and committing) and do not include execution of the processed data, resulting in a minimal security risk. - Ingestion points: Output from
git statusandgit diffcommands referenced inSKILL.md. - Boundary markers: The skill lacks explicit delimiters or instructions to ignore embedded instructions within the diff output.
- Capability inventory: Version control operations including
git commit,git add, andgit applyare authorized via theallowed-toolsconfiguration and described inSKILL.md. - Sanitization: No specific sanitization or filtering of the git output is performed before processing.
Audit Metadata