code-commit
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Employs local
gitcommands for repository inspection and staging, and utilizes tools such ascommitlint,gh, orglabfor extended functionality. - [PROMPT_INJECTION]: Analyzes untrusted data from the local repository (e.g., via
git diff), creating a surface for indirect prompt injection. Ingestion points: File content retrieved throughgitcommands. Boundary markers: None. Capability inventory:git add,git commit. Sanitization: Mandatory user approval before committing and specific instructions to identify and exclude sensitive information. - [DATA_EXFILTRATION]: Reads local file content to generate commit messages. The skill proactively mitigates exposure risks by instructing the agent to detect secrets, credentials, and local configuration files, ensuring they are not staged without explicit user direction.
Audit Metadata