commit
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard Git commands (git add, git diff, git commit) to manage the repository state. These actions are directly tied to the primary purpose of the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external repository data and session history which could theoretically contain malicious instructions. 1. Ingestion points: Repository changes (git diff) and session history (SKILL.md). 2. Boundary markers: None explicitly defined. 3. Capability inventory: Staging all changes (git add -A) and executing commits (git commit). 4. Sanitization: Includes manual confirmation steps (Steps 4, 5, and 12) for the agent to verify changes and flag artifacts before committing.
Audit Metadata