commit
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes standard git commands (
git status,git diff,git log) to manage local version control workflows without involving network operations or dangerous command execution. - [CREDENTIALS_UNSAFE]: The instructions include a specific security measure to 'Never commit gitignored, ephemeral, generated, local-only, or secret files,' demonstrating a proactive approach to preventing accidental data exposure.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the local repository (e.g., through
git diff). While this is a potential injection surface, the risk is minimal because the skill's capabilities are restricted to local git operations and it lacks external network access, which is consistent with its primary purpose.
Audit Metadata