skills/mimukit/skills/commitkit/Gen Agent Trust Hub

commitkit

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data (git diffs and logs) which could contain malicious instructions meant to influence the agent's behavior. * Ingestion points: Data enters through git diff and git log commands as described in the Procedure section of SKILL.md. * Boundary markers: XML-style tags () are used in Draft mode to help separate instructions from the data being analyzed. * Capability inventory: The skill possesses the capability to execute git add, git commit, and git push using the Bash tool. * Sanitization: The skill provides logic for the agent to pause and ask for confirmation if it detects secrets, half-finished work, or changes that appear unintentional.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 05:53 PM
Security Audit — agent-trust-hub — commitkit