commit
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard version control tools including
gitand the GitHub CLI (gh). It defines a structured sequence of commands to gather repository state and perform commits, using individual shell invocations to ensure cross-platform compatibility. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local working environment, which could theoretically contain malicious instructions designed to influence the LLM.
- Ingestion points: The outputs of
git diff HEAD,git log, andgit status(SKILL.md) are processed to generate commit messages. - Boundary markers: No explicit delimiters are used to separate repository data from the agent's internal reasoning.
- Capability inventory: The skill has the ability to execute shell commands (
git,gh) and write to the filesystem (viagit commit). - Sanitization: The skill implements shell-level sanitization by using heredocs (
EOF) when creating commit messages, preventing local command injection via special characters in the message body.
Audit Metadata