git-commit-organizer
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Analysis of the skill instructions and workflow revealed no malicious intent or suspicious patterns.
- [COMMAND_EXECUTION]: The skill performs local Git operations using standard CLI tools. It follows security best practices for shell execution by using quoted heredocs (<<'EOF') when committing generated messages, preventing potential shell injection or unintended expansion from content within the commit body.
- [DATA_EXFILTRATION]: The skill is restricted to local operations. It explicitly forbids the use of "git push" and does not utilize any network-enabled tools or external URLs, ensuring that repository data remains on the user's machine.
- [PROMPT_INJECTION]: The skill processes untrusted input in the form of file diffs, which represents an indirect prompt injection surface. This is addressed through a mandatory security control.
- Ingestion points: File contents and diffs are read using "git diff" and "git status" as defined in "SKILL.md".
- Boundary markers: None explicitly defined for the diff content in the prompt.
- Capability inventory: Limited to local Git commands ("add", "commit", "log"); no network access or arbitrary system command execution is permitted.
- Sanitization: A mandatory human-in-the-loop checkpoint (Step 7) requires the user to explicitly approve all staged changes and commit messages before any action is executed.
Audit Metadata