gensokyo-commit-attribution
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a mechanism for adding attribution trailers to Git commits based on specific contribution criteria.
- [SAFE]: The bundled Python script (
scripts/render_assisted_by.py) performs input validation against a static whitelist of character skill IDs and contains no network or dangerous system calls. - [SAFE]: All Git operations (
status,diff,log,commit) are standard for the skill's purpose and are performed within the local repository context. - [SAFE]: The skill handles untrusted data from Git diffs as part of its primary function to determine attribution. This behavior is scoped to the local repository, and the instructions prioritize existing repository policies over attribution, mitigating potential indirect injection risks.
Audit Metadata