skills/loegnah/ai-kit/commit-detail/Gen Agent Trust Hub

commit-detail

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard local git commands (git add, git commit) to automate source control workflows. These commands are restricted to the local repository environment.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses the !command`` syntax (e.g., !git branch --show-current, !git status) to pull real-time environment data into its instructions. The commands used are read-only and do not include user-supplied arguments, mitigating command injection risks.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests potentially untrusted data through git diff HEAD and git log. Malicious instructions embedded in the codebase being committed could theoretically attempt to influence the agent's commit message generation.
  • Ingestion points: SKILL.md (via !git diff HEAD and !git log injections)
  • Boundary markers: Not present
  • Capability inventory: Local file staging (git add) and committing (git commit)
  • Sanitization: None
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 04:02 PM