wenyan-commit-message
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git diff --cachedandgit diffto retrieve repository changes. These commands are used as read-only operations to inform the content of the commit message. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its reliance on external data (Category 8).
- Ingestion points: The skill ingests untrusted data from the local repository's diff output as specified in the Workflow section of
SKILL.md. - Boundary markers: No delimiters or safety instructions are defined to separate the diff content from the agent's core instructions.
- Capability inventory: The skill's primary capability is text analysis and generation based on the provided diff.
- Sanitization: The skill does not implement sanitization or validation of the ingested diff data before processing.
Audit Metadata