pre-commit-check
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill operates as a purely instructional guideline for standard development practices.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute build commands, tests, and linters, as well as infrastructure deployment and invocation (e.g., AWS Lambda). These are intended capabilities for a pre-commit verification tool.
- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection as it ingests staged repository files and performs actions based on their content.
- Ingestion points: Staged git files processed according to instructions in SKILL.md.
- Boundary markers: None provided to isolate untrusted code content from agent instructions.
- Capability inventory: Execution of build scripts, tests, linters, and cloud deployment/invocation (referenced in SKILL.md).
- Sanitization: None described for the processing of staged file content.
Audit Metadata