commit
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes identity information from a project file (CLAUDE.md) to configure git settings and generate commit metadata. This creates a surface for indirect prompt injection if the project file is maliciously modified. * Ingestion points: Identity fields such as bot_account and bot_email are read from CLAUDE.md as described in the Git Identity section. * Boundary markers: The instructions do not specify the use of delimiters or warnings to prevent the agent from treating data in CLAUDE.md as new instructions. * Capability inventory: The skill uses shell execution to run git config, git add, and git commit commands. * Sanitization: There is no evidence of validation, escaping, or filtering applied to the content read from CLAUDE.md before it is interpolated into shell commands.
- [COMMAND_EXECUTION]: The skill performs shell-based operations to configure git identity and manage repository commits. These operations rely on external data inputs which may be untrusted.
Audit Metadata