skills/nicholyx/ai-skills/git-commit/Gen Agent Trust Hub

git-commit

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on the Bash tool to perform repository management tasks, specifically executing git status, git diff, git add, git commit, and git push. These operations are standard for the skill's functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted input by analyzing the output of git diff to determine the context for commit messages. This creates a vulnerability surface where content within the repository could attempt to override agent instructions.
  • Ingestion points: Staged changes are ingested via git diff --staged as described in SKILL.md.
  • Boundary markers: The instructions do not define specific delimiters to isolate the diff content from the agent's operational logic.
  • Capability inventory: The skill has access to the Bash tool, allowing it to modify the repository and perform network operations via Git.
  • Sanitization: No validation or sanitization of the diff output is performed prior to analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 08:42 PM