git-commit
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill involves the construction and execution of shell commands such as
git add,git commit, andgit switch. This behavior is controlled through a structured workflow that requires the agent to display all proposed actions to the user and wait for explicit confirmation before execution. - [INDIRECT_PROMPT_INJECTION]: The skill reads external project files like
CONTRIBUTING.mdandAGENTS.mdto adopt project-specific commit conventions. This creates a potential surface for indirect prompt injection if those files contain malicious instructions. - Ingestion points: Repository metadata files and documentation (
CONTRIBUTING.md,AGENTS.md,docs/). - Boundary markers: No explicit delimiters or warnings are used when interpolating file content into the commit message drafting process.
- Capability inventory: The skill has the capability to write to the repository and change branches via the
gitCLI. - Sanitization: The skill relies on manual user review of the final commit message and file list as the primary safeguard against malicious content ingestion.
Audit Metadata