ship-the-change
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructions for standard version control workflows and explicitly advises against committing sensitive information such as secrets or environment variables.
- [COMMAND_EXECUTION]: The skill utilizes common git commands (git status, git diff, git add, git commit, git push) to manage code changes. These commands are used for their intended purpose within the scope of the skill's description.
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from git output.
- Ingestion points: Output from git status and git diff as described in SKILL.md.
- Boundary markers: Absent.
- Capability inventory: git add, git commit, git push, and execution of local verification tools such as tests or typecheckers.
- Sanitization: Absent.
Audit Metadata