commit-message
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool restricted to git commands (
git diff --cached --statandgit diff --cached) to inspect the local repository state. This activity is restricted to the intended purpose of generating commit messages. - [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting untrusted data from the repository's staged changes.
- Ingestion points: STAGE changes are read using
git diffas defined in the workflow ofSKILL.md. - Boundary markers: Absent. There are no instructions or delimiters telling the agent to treat the code content as data only and to ignore any natural language instructions found within the code or comments.
- Capability inventory: The skill has access to restricted
Bashcommands and generates text output meant for the user to execute in their terminal. - Sanitization: Absent. The staged content is read and processed by the LLM without filtering or validation.
Audit Metadata