git-commit

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes standard git operations including git diff, git status, git add, and git commit via the Bash tool to manage local repository state.- [PROMPT_INJECTION]: Potential for indirect prompt injection where malicious instructions embedded in the code being committed could influence the agent's behavior.
  • Ingestion points: Reads external data from the file system via git diff and git diff --staged in SKILL.md to generate commit messages.
  • Boundary markers: Absent; there are no specific markers or instructions to treat the ingested diff content as untrusted data or to ignore embedded instructions.
  • Capability inventory: The skill has the capability to modify the repository state via git add and git commit as defined in SKILL.md.
  • Sanitization: Absent; the skill does not sanitize or escape the content of the diff before processing it for message generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 12:20 AM
Security Audit — agent-trust-hub — git-commit