cpm
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to automate Git workflows, specifically calling
git commitandgit push. It explicitly prohibits dangerous variants such as force pushing (--force), amending commits (--amend), or bypassing hooks (--no-verify). - [PROMPT_INJECTION]: No attempts to override AI safety guidelines or bypass system prompts were detected. The instructions focus on Git operational logic and user intent for repository management.
- [DATA_EXFILTRATION]: While the skill performs network operations via
git push, this is the primary stated purpose of the tool. There is no evidence of harvesting sensitive environment variables, credentials, or files outside the standard Git workflow. - [EXTERNAL_DOWNLOADS]: The skill does not perform any remote code downloads or package installations. It relies on locally available Git tooling and inherited logic from a related
cpskill.
Audit Metadata