commit-operations
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external, user-controlled data from GitHub commit messages, author metadata, and code diffs.
- Ingestion points: Commands such as
gh api repos/owner/repo-name/commitsandgit logretrieve content from external sources. - Boundary markers: None present in the provided shell examples. Data is retrieved and piped to
jqor standard output without wrapping in delimiters. - Capability inventory: The skill utilizes network API calls via
ghand file system operations viagitandcdcommands. - Sanitization: The skill does not include instructions or scripts to sanitize or filter out potential instructions embedded in commit messages or diff contents.
- [COMMAND_EXECUTION]: The skill relies on shell command execution for its primary functionality.
- Evidence: Multiple examples using
gh api,git log,git show, andgit diffto interact with repositories. - Context: These are standard development tools used for their intended purpose in a developer-oriented skill.
Audit Metadata