git-commit-generator
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs automated git commits using the
git commit -mcommand. It correctly employs a quoted heredoc (cat <<'EOF') to supply the commit message, which is a secure practice that prevents the shell from interpreting special characters or expanding variables within the generated message.\n- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes data from the repository's staged changes (git diff --cached) to generate commit messages. This data is untrusted and could contain malicious instructions designed to alter the agent's behavior during the analysis phase.\n - Ingestion points: Step 2 of the skill reads the output of
git diff --cached,git diff --stat, andgit log.\n - Boundary markers: The instructions lack explicit delimiters or instructions to the model to ignore any agent-like commands found within the diff output.\n
- Capability inventory: The skill possesses the ability to execute git commands and modify the repository history.\n
- Sanitization: No sanitization or filtering is performed on the diff content before it is processed by the agent.
Audit Metadata