commit-detail
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard local git commands (
git add,git commit) to automate source control workflows. These commands are restricted to the local repository environment. - [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!command`` syntax (e.g.,!git branch --show-current,!git status) to pull real-time environment data into its instructions. The commands used are read-only and do not include user-supplied arguments, mitigating command injection risks. - [INDIRECT_PROMPT_INJECTION]: The skill ingests potentially untrusted data through
git diff HEADandgit log. Malicious instructions embedded in the codebase being committed could theoretically attempt to influence the agent's commit message generation. - Ingestion points:
SKILL.md(via!git diff HEADand!git loginjections) - Boundary markers: Not present
- Capability inventory: Local file staging (
git add) and committing (git commit) - Sanitization: None
Audit Metadata