conventional-commits
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze the contents of git repositories, which are untrusted external inputs.
- Ingestion points: Untrusted data enters the agent context via shell commands
git status --short,git diff --cached --stat, andgit diff --cached(SKILL.md). - Boundary markers: The instructions lack explicit boundary markers or warnings to the agent to ignore instructions that might be embedded within the code changes or file contents being analyzed.
- Capability inventory: The skill requires the agent to execute shell commands through a command-line interface to retrieve repository state (SKILL.md).
- Sanitization: No sanitization, validation, or filtering of the diff content is specified before the agent processes it to generate commit messages.
- [COMMAND_EXECUTION]: The skill workflow relies on the agent executing shell commands to inspect the local file system and git state.
- Evidence: The 'Workflow' section explicitly directs the agent to run
git statusandgit diff(SKILL.md).
Audit Metadata