create-commit

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows security best practices by explicitly instructing the agent to never stage sensitive files, such as .env, *.key, *.pem, and other credential-related files.
  • [COMMAND_EXECUTION]: The skill utilizes standard git commands to manage staged changes and create commits. It uses a quoted HEREDOC (<<'EOF') for the git commit command, which is a secure method to prevent the shell from executing any code that might be inadvertently included in the AI-generated commit message.
  • [DATA_EXFILTRATION]: There are no network operations or external data transfer mechanisms. The skill's scope is restricted to the local git repository.
  • [PROMPT_INJECTION]: The instructions are clear and do not contain any patterns intended to bypass safety filters or override agent behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 03:51 AM