git-history-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell tools to execute specific git operations including
git log,git blame,git shortlog, andgit grep. The instructions explicitly constrain shell usage to one git command per call to perform its archaeological analysis. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data sourced from the repository's historical records and code files.
- Ingestion points: Data enters the agent's context through the output of git commands (commit messages, logs, blame info) and via the
Readtool for file contents. - Boundary markers: The instructions do not include explicit boundary markers or delimiters to separate the skill's operational logic from the untrusted data being analyzed.
- Capability inventory: The agent possesses shell execution capabilities (limited to git commands) and broad file system reading access within the repository.
- Sanitization: There are no instructions provided for sanitizing or filtering input, which may allow instructions embedded in code comments or commit messages to influence the agent's behavior.
Audit Metadata