monthly-invoice-summary
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
git logcommand to retrieve commit history from the local repository for a specified time period. This is a legitimate and standard operation for generating development summaries.- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from Git commit messages and user-provided notes, which could theoretically contain malicious instructions. - Ingestion points: Reads data from
git logoutput and user-supplied notes/summaries in SKILL.md. - Boundary markers: No explicit delimitation or 'ignore instructions' warnings are provided when processing these inputs.
- Capability inventory: Executes local shell commands (
git log) and generates summarized text for the user. - Sanitization: No specific sanitization or validation of commit messages or notes is performed before analysis.
Audit Metadata