re0-git
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes git CLI commands including
git commit --amend,git commit-tree, andgit diffto modify the local repository state and rewrite commit history. These operations are core to the skill's intended functionality of message refinement. - [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it processes untrusted data from the repository's history to generate output.
- Ingestion points: SKILL.md (Workflow step 2: Reads the output of
git show,git diff, andgit log). - Boundary markers: Absent; the skill does not define delimiters to encapsulate the untrusted git history data.
- Capability inventory: The agent has the ability to execute git history modification commands (
git commit --amend,git commit-tree). - Sanitization: Absent; the skill does not specify methods for filtering or validating the content extracted from the git logs before it is processed by the model.
Audit Metadata