commit
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes repository history (
git log) and conversation context to determine the appropriate commit convention and identify issue references. This behavior introduces a surface where malicious content in the git log or issue trackers could attempt to influence the agent's logic. The risk is mitigated by the skill's specific focus on git operations and its reliance on pattern matching rather than open-ended execution. - Ingestion points: Reads git history (
git log) inrules/convention-detection.mdandrules/commit-type.md, and conversation context inrules/issue-references.md. - Boundary markers: The instructions do not define explicit delimiters or 'ignore' instructions for data retrieved from the repository history.
- Capability inventory: The skill has the capability to stage files (
git add), create commits (git commit), and run security scanners (gitleaks,trufflehog) as specified inSKILL.md. - Sanitization: The instructions do not specify sanitization or escaping of content retrieved from external sources like git logs before processing.
Audit Metadata