oneshot
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The workflow relies on interpreting user instructions and task descriptions, which provides an attack surface for indirect prompt injection.
- Ingestion points: User task descriptions and conversational feedback are processed in SKILL.md.
- Boundary markers: Absent; the skill does not define specific delimiters for processed user content.
- Capability inventory: The skill executes git commit and git push operations as described in SKILL.md.
- Sanitization: Absent; the skill does not specify sanitization for the inputs that trigger transition guards.
- [COMMAND_EXECUTION]: The skill facilitates the execution of git push commands during the direct-commit path in the completed phase of SKILL.md. This is the intended behavior for the workflow.
Audit Metadata