commit
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local git commands to gather repository information and perform version control operations.
- Evidence: The workflow in
SKILL.mdusesgit rev-parse,git diff --cached,git log, andgit committo manage the commit process. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local file changes to generate its output, which could allow instructions embedded within source code to influence the final commit message.
- Ingestion points: Repository changes are ingested via
git diff --cachedandgit diff --cached --statas described inSKILL.md. - Boundary markers: There are no explicit delimiters or instructions defined to isolate the diff content from the agent's logic.
- Capability inventory: The skill has the capability to write to the local git history using the
git commitcommand. - Sanitization: No sanitization or filtering of the data retrieved from the staged changes is performed before it is used for generation.
Audit Metadata