git-commit
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes standard git operations including
git diff,git status,git add, andgit commitvia the Bash tool to manage local repository state.- [PROMPT_INJECTION]: Potential for indirect prompt injection where malicious instructions embedded in the code being committed could influence the agent's behavior. - Ingestion points: Reads external data from the file system via
git diffandgit diff --stagedinSKILL.mdto generate commit messages. - Boundary markers: Absent; there are no specific markers or instructions to treat the ingested diff content as untrusted data or to ignore embedded instructions.
- Capability inventory: The skill has the capability to modify the repository state via
git addandgit commitas defined inSKILL.md. - Sanitization: Absent; the skill does not sanitize or escape the content of the diff before processing it for message generation.
Audit Metadata