git-commit-only

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local git commands such as git status, git diff, git add, and git commit to manage the repository state. These commands are limited to local operations and the skill explicitly forbids pushing to remotes or running destructive commands like git reset --hard.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) because it processes data from the local repository to generate commit messages.
  • Ingestion points: Repository file contents and changes are read using git diff and git diff --cached as specified in SKILL.md.
  • Boundary markers: The instructions do not define delimiters or specific warnings to ignore instructions embedded within the code or comments of the files being diffed.
  • Capability inventory: The skill can perform file system operations via git add and git commit across the repository as instructed in SKILL.md.
  • Sanitization: No sanitization or validation of the ingested file content is performed before interpolation into the agent's context for message generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 03:32 PM
Security Audit — agent-trust-hub — git-commit-only