tenzir-commit-changes
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local git commands including git status, git diff, and git commit to manage repository state. These commands are essential to the skill's primary function.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests untrusted data from git diffs to generate commit messages. * Ingestion points: Reads output from git status and git diff (SKILL.md). * Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the diff content. * Capability inventory: The skill can execute git commit, git commit --fixup, and git commit --amend (SKILL.md and references/write-commit-messages.md). * Sanitization: No sanitization or filtering is applied to the diff content before it is used for message generation.
Audit Metadata