git-commit
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses git and gh (GitHub CLI) to analyze repository status, view diffs, read history, and manage the commit process. Specifically, it executes git status, git diff, git log, gh pr view, git add, git apply, and git commit. It also generates and applies patches to handle atomic grouping of changes in the git index.
- [PROMPT_INJECTION]: The skill ingests untrusted data from the repository's code diffs and commit history to generate commit messages and determine commit groupings, creating an indirect prompt injection surface.
- Ingestion points: Local git diffs and commit history logs (SKILL.md).
- Boundary markers: None defined in the skill instructions.
- Capability inventory: Ability to create and modify git commits and the staging area (SKILL.md).
- Sanitization: No specific sanitization or filtering of the ingested diff data is mentioned.
Audit Metadata