commit
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a standard development workflow using local git commands such as status, diff, log, add, and commit.
- [INDIRECT_PROMPT_INJECTION]: The skill reads untrusted data from the local repository which could contain adversarial instructions.
- Ingestion points: The git diff and git log commands in SKILL.md read external file content into the agent context.
- Boundary markers: No specific delimiters or safety instructions are used to separate diff content.
- Capability inventory: The skill is restricted to git add and git commit operations.
- Sanitization: No sanitization is performed on the ingested git data.
Audit Metadata