add
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git logto gather context andgit committo save changes, which are standard operations for a development-focused agent. - [DYNAMIC_EXECUTION]: The skill is instructed to build and run newly created code to implement requested features. This is a core functionality of the skill's purpose as a software development assistant.
- [INDIRECT_PROMPT_INJECTION]: The skill reads external project files such as
AGENTS.md,PLAN.md, andNOTES.md. While this creates a surface for indirect prompt injection if those files are sourced from untrusted parties, it is a necessary function for the skill to perform its task of project management and feature implementation.
Audit Metadata