commit
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context placeholders to execute
git status,git diff,git branch, andgit logat load time. These commands are standard for development workflows and do not involve sensitive file access or network communication. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the project repository via git logs and diffs. While this presents an attack surface where instructions could be hidden in code or commit messages, the skill's instructions strictly limit the agent to a single task (creating a commit) and forbid other tool usage, mitigating the risk.
- Ingestion points: SKILL.md (via context markers executing git commands)
- Boundary markers: None
- Capability inventory: Local tool calls for git staging and committing
- Sanitization: None
- [NO_CODE]: The skill is composed entirely of instructions and metadata in markdown format; it does not ship with any external scripts, binaries, or executable code.
Audit Metadata