check-and-commit
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill extracts and executes shell commands from the
.ai/agentic.config.jsonfile. This is the primary functionality of the skill but inherently allows for the execution of arbitrary commands stored within the repository. - [COMMAND_EXECUTION]: This workflow represents an indirect prompt injection surface where untrusted configuration data influences agent behavior. Ingestion points: .ai/agentic.config.json. Boundary markers: None. Capability inventory: Shell execution of validation commands, git commit, and git push. Sanitization: The skill does not validate or sanitize the commands extracted from the configuration file before execution.
Audit Metadata