changelog
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
git logcommand to retrieve repository history, which is required for the stated functionality. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes external data (git commit messages) that could contain malicious instructions designed to influence the agent's output.
- Ingestion points: Git commit history output from
git log(SKILL.md). - Boundary markers: Absent; there are no instructions to the agent to use delimiters or to ignore instructions found within the commit messages.
- Capability inventory: The agent's capabilities in this context are limited to formatting and printing text to the user session.
- Sanitization: Absent; the skill does not specify any validation, filtering, or escaping of the commit message content.
Audit Metadata