commit-and-close
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The workflow involves executing a local shell script located at
script/commit-and-close.sh. The instructions allow this script to generate new files that are automatically included in Git commits, providing a mechanism for automated filesystem modification. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Linear, such as issue descriptions and acceptance criteria, to determine when it is safe to commit and close work. This represents a potential attack surface where malicious data in an issue could attempt to influence the agent's behavior.
- [INGESTION_POINTS]: Linear issue keys and acceptance criteria retrieved through the Linear service.
- [BOUNDARY_MARKERS]: None. The instructions do not define delimiters or specific safety instructions to disregard embedded commands in the issue data.
- [CAPABILITY_INVENTORY]: Execution of
script/commit-and-close.sh, Git operations (status,diff,commit), and Linear issue status updates. - [SANITIZATION]: None. The workflow relies on the 'done' state in Linear without specifying validation of the content within the criteria strings.
Audit Metadata