commit-work

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows a standard developer workflow for git version control. It uses benign commands such as git status, git diff, git add -p, and git commit to help users manage their code changes.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill includes a proactive security check in its workflow, specifically instructing the agent to verify that no secrets or tokens are present in the staged changes before committing. This is a defensive security practice.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (code changes via git diff), the instructions emphasize granular review (git add -p) and human-in-the-loop verification, which minimizes the risk of the agent being influenced by malicious instructions embedded in the code being committed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 08:36 AM