simplify
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted commit data and messages which may contain adversarial instructions.\n
- Ingestion points: The skill uses
git logandgit show HEADto pull content from the repository (SKILL.md).\n - Boundary markers: No explicit delimiters are specified to isolate the untrusted code content from the agent's instructions.\n
- Capability inventory: The skill can read local files, execute git commands, and run user-specified validation tools like tests or formatters (SKILL.md).\n
- Sanitization: No sanitization or filtering of the commit data is performed before processing.
Audit Metadata