pre-commit-check
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a defensive workflow by explicitly requiring the agent to scan for and block hardcoded secrets, API keys, and credentials in staged files before any commit proceeds.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface as it ingests untrusted content (staged files) and utilizes capabilities such as build and test commands. 1. Ingestion points: Staged files reviewed during the pre-commit process. 2. Boundary markers: None explicitly defined. 3. Capability inventory: Execution of build commands, test suites, linters, and cloud service invocations. 4. Sanitization: None performed on the content of the staged files before review.
- [COMMAND_EXECUTION]: The skill directs the agent to execute standard project verification tools such as compilers, test runners, and linters. These actions are performed within the user's local project context to verify code integrity and do not represent a security risk within the skill's own logic.
Audit Metadata