git-commit-and-push
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs shell-level operations using
gitcommands, includinggit commit,git push, andgit remote, to manage repository state. These actions are triggered by user requests to synchronize code.- [PROMPT_INJECTION]: Indirect Prompt Injection surface: The skill ingests external data in the form of GitHub issue titles and uses them to construct commit messages. In the 'Special Case' defined in Step 8, the skill is instructed to skip user confirmation and bypass previews if the user requests a 'direct push'. - Ingestion points: External GitHub issue titles associated with issue numbers identified in branch names or user input (SKILL.md).
- Boundary markers: Absent; the skill does not wrap the ingested title in delimiters to prevent instruction leakage.
- Capability inventory:
git commitandgit pushare used across the skill to perform write operations to local and remote repositories (SKILL.md). - Sanitization: Absent; while the skill restricts the output format, it does not provide logic to sanitize the external title content for terminal escape sequences or embedded instructions.
Audit Metadata