what-did-i-get-done
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests git commit messages to generate summaries, creating a surface for indirect prompt injection if those messages contain adversarial instructions. * Ingestion point: The workflow reads commit history authored by the current git user in SKILL.md. * Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore embedded commands within the commit messages. * Capability inventory: The skill tools are scoped to reading local git metadata. * Sanitization: The skill does not implement sanitization or validation of the commit message content before processing.
Audit Metadata