git-ops
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes git operations as direct shell commands using the
bashtool. This is the primary method for executing operations likestatus,add,commit,push, andpullas defined inreferences/git.md. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted data from the repository environment, such as diffs and logs, to provide workflow guidance and generate commit messages. This creates a surface for indirect prompt injection.
- Ingestion points: Repository state, working directory changes, and git logs are analyzed during the
Analyzestep inreferences/git.md. - Boundary markers: No specific delimiters or instruction-ignore markers are specified for the ingested content.
- Capability inventory: Operations include
bashfor git commands,readfor state analysis,grepfor log parsing, andwritefor message generation. - Sanitization: No explicit sanitization or escaping of diff content is described.
Audit Metadata