smart-commit
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Git commands (
status,diff,log,add,commit) for local version control. While there is a potential for shell injection if a commit message contains the 'EOF' heredoc delimiter, the mandatory human review of the plan before execution mitigates this risk. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes file diffs which may contain content from untrusted sources, potentially influencing the commit grouping or message generation.
- Ingestion points:
git diffoutputs are provided to a subagent in SKILL.md. - Boundary markers: None present.
- Capability inventory: Executes file staging and commits.
- Sanitization: Relies on the user to review the plan in Step 3.
Audit Metadata