git-commit
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the Bash tool to perform repository management tasks, specifically executing
git status,git diff,git add,git commit, andgit push. These operations are standard for the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted input by analyzing the output of
git diffto determine the context for commit messages. This creates a vulnerability surface where content within the repository could attempt to override agent instructions. - Ingestion points: Staged changes are ingested via
git diff --stagedas described inSKILL.md. - Boundary markers: The instructions do not define specific delimiters to isolate the diff content from the agent's operational logic.
- Capability inventory: The skill has access to the Bash tool, allowing it to modify the repository and perform network operations via Git.
- Sanitization: No validation or sanitization of the diff output is performed prior to analysis.
Audit Metadata