commit-review
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes git commit messages and diffs, which are external inputs that could contain adversarial content designed to influence the agent's behavior during the review process.
- Ingestion points:
references/current-guidance.mdinstructs the agent to read commit messages, diffs, tests, and documentation. - Boundary markers: No specific delimiters are provided to isolate untrusted commit data from the agent's instructions.
- Capability inventory: The skill is authorized to execute the
review hookcommand to validate commits. - Sanitization: The instructions do not include steps to sanitize or filter the content of the commits before evaluation.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a specific command-line tool for commit validation.
- Evidence:
references/current-guidance.mdspecifies the usage ofreview hook --review-scope commit-range --review-base <base> --review-head <head>.
Audit Metadata