start-here
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs common
gitcommand-line operations (such asgit status,git log,git pull, andgit rev-parse) to determine the repository's context and synchronization status with its remote. These are standard tools used for its intended workflow management purpose. - [INDIRECT_PROMPT_INJECTION]: The skill reads external project documentation and git metadata which could be influenced by external contributors.
- Ingestion points: The skill reads
git logoutput and repository documentation (File:SKILL.md). - Boundary markers: None explicitly defined for untrusted document content.
- Capability inventory: The skill uses information for high-level workflow decision-making and repository inspection (File:
SKILL.md). - Sanitization: No filtering or sanitization of ingested text is described.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill promotes positive security practices by instructing users to keep production keys out of the chat and development environment, recommending dedicated production operator files outside the checkout directory instead.
Audit Metadata