git-style
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and does not contain any executable scripts or binary files.
- [SAFE]: Instructions explicitly include safety guards, such as requiring user authorization before performing commits, pushes, or merges, and prohibiting the initialization of repositories or installation of tools as side effects.
- [SAFE]: The skill encourages project-appropriate behavior, including using configured identities and avoiding the fabrication of metadata.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from repository history, status, and diffs. While this is a vulnerability surface, it is fundamental to the skill's primary purpose and is mitigated by the requirement for user authorization before any repository-altering actions are executed.
- Ingestion points: Git repository status, history (logs), and file diffs (SKILL.md).
- Boundary markers: The skill does not define specific delimiters for separating repository content from instructions.
- Capability inventory: Git operations (status, log, diff, commit, push, merge, etc.) are used for management.
- Sanitization: No explicit sanitization or escaping of repository data is described.
Audit Metadata