commit
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read repository status, diffs, and logs to understand changes. Because repository content and commit history can originate from external or untrusted sources, this creates a surface for indirect prompt injection. Malicious content within a file being analyzed could attempt to override the agent's instructions or manipulate the generated commit message to include shell metacharacters, though the risk is mitigated by standard LLM guardrails and the specific scope of the git tools provided.
Audit Metadata