stage
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the local repository state which could be influenced by external sources.
- Ingestion points: Command output from
git statusandgit diffinSKILL.md. - Boundary markers: None specified to delimit command output from instructions.
- Capability inventory: The skill can stage files (
git add), read file differences (git diff), and apply cached patches (git apply). - Sanitization: The skill provides instructions to warn the user if secrets are detected and includes a verification step using
git diff --cachedto review changes before finalizing. - [COMMAND_EXECUTION]: The skill utilizes local shell commands to perform Git operations.
- Evidence: Use of
git status,git add,git diff, andgit applycommands. - Context: These commands are necessary and standard for the skill's primary purpose of managing a Git staging area.
Audit Metadata