git-cherry-pick
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands via Git (e.g.,
git log,git cherry-pick,git push). These are standard operations for the skill's purpose but involve interaction with the system shell.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by inspecting Git history, commit messages, and ticket references. - Ingestion points:
git log,git show, and external ticket context. - Boundary markers: None explicitly defined for commit message parsing.
- Capability inventory: The skill has file-writing capabilities (through
git cherry-pick) and network capabilities (git push,git fetch). - Sanitization: There is no explicit sanitization of commit messages or ticket metadata before the agent interprets them to 'infer the intent'.
Audit Metadata