commit
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple git commands such as
git add,git commit,git push, andgit diffto manage the repository state. These operations are standard and necessary for the skill's stated purpose of managing git commits. - [DATA_EXFILTRATION]: The skill supports a
--pushflag which initiates network operations to send local code changes to a remote git host. This is an intended core feature and utilizes the user's existing git configuration. - [PROMPT_INJECTION]: In
--deepmode, the skill analyzes chat transcripts and repository diffs to generate commit messages. This involves processing external/untrusted data, but the context is limited to summarization and does not include execution of instructions found within that data.
Audit Metadata