re0-git
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various Git commands (
git commit --amend,git commit-tree,git show,git diff) to inspect and modify local repository history. These operations are performed in the local environment to facilitate commit message cleanup. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to its processing of untrusted data from the Git history.
- Ingestion points: The agent reads existing commit messages, metadata, and code diffs using
git log,git show, andgit diff(SKILL.md). - Boundary markers: The instructions lack specific delimiters or negative constraints to prevent the agent from following instructions hidden within the commit messages it analyzes.
- Capability inventory: The agent possesses the capability to modify repository history using
git commitand rebuild commit trees usinggit commit-tree(SKILL.md). - Sanitization: There is no evidence of sanitization or safety filtering applied to the content retrieved from the Git log before it is used to generate new messages.
Audit Metadata