git-commit-only
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local
gitcommands such asgit status,git diff,git add, andgit committo manage the repository state. These commands are limited to local operations and the skill explicitly forbids pushing to remotes or running destructive commands likegit reset --hard. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) because it processes data from the local repository to generate commit messages.
- Ingestion points: Repository file contents and changes are read using
git diffandgit diff --cachedas specified inSKILL.md. - Boundary markers: The instructions do not define delimiters or specific warnings to ignore instructions embedded within the code or comments of the files being diffed.
- Capability inventory: The skill can perform file system operations via
git addandgit commitacross the repository as instructed inSKILL.md. - Sanitization: No sanitization or validation of the ingested file content is performed before interpolation into the agent's context for message generation.
Audit Metadata