formatting-commit-messages
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from the local repository which may contain untrusted data that could influence the agent's behavior.
- Ingestion points: The skill uses
git diff --cachedandgit diff --cached --statinSKILL.mdto read staged code changes. - Capability inventory: The skill has the ability to execute
git commitbased on its analysis. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to treat the code diff as untrusted data or to ignore instructions embedded within the code.
- Sanitization: The skill does not perform sanitization or filtering on the diff content before processing it.
- [COMMAND_EXECUTION]: The skill executes standard system commands to interact with the version control system.
- Evidence: Use of
git diff,git status, andgit commitinSKILL.mdto manage repository state.
Audit Metadata