git-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze and process data from local Git repositories, which constitutes a potential attack surface for indirect prompt injection if the repository contains malicious content in commit messages or file data.
- Ingestion points: The skill uses
git status,git log,git diff, andgit showto read repository data into the agent's context (SKILL.md). - Boundary markers: There are no specific delimiters or instructions provided to the agent to ignore or isolate instructions that might be embedded within the Git output.
- Capability inventory: The skill authorizes the agent to perform Git write operations, including
git commit,git push,git merge, andgit rebaseacross all scripts. - Sanitization: The instructions do not specify any validation, escaping, or filtering for the external content retrieved from Git commands before it is processed by the agent.
Audit Metadata