clean-commits
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from git diffs and repository logs which are external, potentially untrusted inputs.\n
- Ingestion points:
git diffandgit logcommands used to read repository content (SKILL.md).\n - Boundary markers: No specific delimiters or instructions to ignore embedded instructions are defined for the input data.\n
- Capability inventory: The skill uses
git diffandgit log(SKILL.md) to read data; no file-write, network, or high-privilege execution capabilities are identified.\n - Sanitization: No sanitization or filtering is performed on the data read from the repository history or diffs.\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to gather context about the repository.\n
- Evidence: Usage of
git diff --staged,git diff, andgit log --oneline -15within the workflow instructions (SKILL.md). These are read-only operations necessary for the skill's primary function.
Audit Metadata