commit-work
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows a standard developer workflow for git version control. It uses benign commands such as
git status,git diff,git add -p, andgit committo help users manage their code changes. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill includes a proactive security check in its workflow, specifically instructing the agent to verify that no secrets or tokens are present in the staged changes before committing. This is a defensive security practice.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (code changes via
git diff), the instructions emphasize granular review (git add -p) and human-in-the-loop verification, which minimizes the risk of the agent being influenced by malicious instructions embedded in the code being committed.
Audit Metadata