commit
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile uses the!syntax to executescripts/preflight.shduring the skill load phase. This script populates the agent's context with essential repository metadata, branch status, and configuration details necessary for the commit workflow. - [EXTERNAL_DOWNLOADS]: The
preflight.shscript performs agit fetchoperation to the repository's configuredorigin. This is used to determine if the local default branch is synchronized with the remote, ensuring that the subsequent rebase operation target is current. - [COMMAND_EXECUTION]: The skill utilizes
PreToolUseandPostToolUsehooks to execute shell scripts (guard-git.shandstamp-review.sh). These scripts enforce workflow constraints by blocking directgit commitcalls and verifying that commit messages have been approved by the required review sub-agents. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from git diffs and user-edited commit messages.
- Ingestion points: Repository diffs gathered in
preflight.shand the contents of theCOMMIT_AGENTMSGfile. - Boundary markers: None explicitly present in the shell script execution; however, the workflow instructions mandate the use of
fix-proseandreview-commit-messageskills to validate the content. - Capability inventory: The skill has the ability to execute repository-level commands including
git commit,git fetch, andgit rebasethrough its bundled scripts. - Sanitization: The skill relies on external validation steps (linters and sub-agent reviews) to verify the integrity and appropriateness of the commit message text before proceeding.
Audit Metadata