commit
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes file content and git diffs, which are external data sources that could contain embedded instructions.
- Ingestion points: The skill analyzes outputs from
git status,git diff, andgit diff --cachedto determine the scope of changes and propose commit groups (SKILL.md). - Boundary markers: No specific delimiters or "ignore embedded instructions" markers are used to wrap the content of the diffs during processing.
- Capability inventory: The skill uses
Bashtools scoped togit:*allowing it to stage and commit files (SKILL.md). - Sanitization: The instructions include a mandatory manual confirmation step ("Ask: 'Stage in-scope files and create the commits below?'") which provides a human-in-the-loop safety check.
Audit Metadata