skills/pitzcarraldo/skills/commit/Gen Agent Trust Hub

commit

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local git commands to gather repository information and perform version control operations.
  • Evidence: The workflow in SKILL.md uses git rev-parse, git diff --cached, git log, and git commit to manage the commit process.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local file changes to generate its output, which could allow instructions embedded within source code to influence the final commit message.
  • Ingestion points: Repository changes are ingested via git diff --cached and git diff --cached --stat as described in SKILL.md.
  • Boundary markers: There are no explicit delimiters or instructions defined to isolate the diff content from the agent's logic.
  • Capability inventory: The skill has the capability to write to the local git history using the git commit command.
  • Sanitization: No sanitization or filtering of the data retrieved from the staged changes is performed before it is used for generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 07:36 AM