git-commit-organizer

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Analysis of the skill instructions and workflow revealed no malicious intent or suspicious patterns.
  • [COMMAND_EXECUTION]: The skill performs local Git operations using standard CLI tools. It follows security best practices for shell execution by using quoted heredocs (<<'EOF') when committing generated messages, preventing potential shell injection or unintended expansion from content within the commit body.
  • [DATA_EXFILTRATION]: The skill is restricted to local operations. It explicitly forbids the use of "git push" and does not utilize any network-enabled tools or external URLs, ensuring that repository data remains on the user's machine.
  • [PROMPT_INJECTION]: The skill processes untrusted input in the form of file diffs, which represents an indirect prompt injection surface. This is addressed through a mandatory security control.
  • Ingestion points: File contents and diffs are read using "git diff" and "git status" as defined in "SKILL.md".
  • Boundary markers: None explicitly defined for the diff content in the prompt.
  • Capability inventory: Limited to local Git commands ("add", "commit", "log"); no network access or arbitrary system command execution is permitted.
  • Sanitization: A mandatory human-in-the-loop checkpoint (Step 7) requires the user to explicitly approve all staged changes and commit messages before any action is executed.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 02:39 PM
Security Audit — agent-trust-hub — git-commit-organizer