commit
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from user-provided arguments and file diffs to generate commit messages and organize changes.
- Ingestion points: The
argumentinput field and the content of files retrieved viagit diff. - Boundary markers: Absent. The skill does not use specific delimiters to isolate the untrusted data from its instructions.
- Capability inventory: The skill's actions are restricted to Git operations (stash, add, restore, mv, rm, apply, commit) within the current repository scope.
- Sanitization: The skill includes robust defensive instructions, explicitly prohibiting the agent from including credentials, secret store layouts, or personal user data in commit messages. It also strictly forbids the use of
git add -fto ensure that ignored files containing secrets or local configuration are not accidentally committed.
Audit Metadata