commit
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to instructions embedded in the data it processes, such as the output of git commands or user-supplied arguments.
- Ingestion points: The skill reads
git diff --stagedoutput and the$ARGUMENTSvariable defined inSKILL.md. - Boundary markers: None. The skill does not use XML tags, triple quotes, or specific instructions to the agent to treat external data as untrusted.
- Capability inventory: The skill uses the
Bashtool to execute shell commands on the local file system. - Sanitization: No sanitization, escaping, or validation logic is present to handle malicious instructions within the git history or user input.
- [COMMAND_EXECUTION]: The skill performs shell operations using the
Bashtool. While these commands (git status,git diff,git commit) are essential for its functionality, the lack of sanitization for the$ARGUMENTSvariable creates a risk where a user could provide a malicious string that alters the intended shell command behavior.
Audit Metadata