The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes standard git commands such as git status, git diff, git add, and git commit to manage the repository lifecycle. These operations are essential for the skill's primary function of automating commit workflows.
[SAFE]: It contains explicit warnings and instructions to prevent the exposure of sensitive data, specifically mentioning that secrets like .env files and private keys should never be committed and should be added to .gitignore.
[PROMPT_INJECTION]: There is a potential for indirect prompt injection (Category 8) because the skill reads the output of git diff and git status to generate commit messages. An attacker with the ability to modify project files could embed instructions intended to influence the generated commit message or the agent's behavior during the analysis phase. However, the risk is inherent to tools that process codebase content, and the skill implements no specific network-exfiltration or high-privilege capabilities that would escalate the impact.
[COMMAND_EXECUTION]: The skill includes instructions to modify global git configuration (git config --global commit.gpgsign true) to enable signed commits. While this is a persistent change to the user's environment, it is directly related to the stated purpose of managing secure git workflows.

git-commit