commit
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from
.claude/agents/activity/{branch}.jsonlto automatically populate 'Agents Involved' and 'Co-Authored-By' sections in commit messages. - Ingestion points: Phase 3b reads the activity ledger for the current branch.
- Boundary markers: None present; the skill treats content from the JSONL as trusted names and descriptions for attribution.
- Capability inventory: The skill uses
git committo create new history andWriteto create handoff files. - Sanitization: The skill filters entries based on timestamp and duration but does not sanitize the string content of agent names or activity descriptions.
- [COMMAND_EXECUTION]: The skill performs multiple shell operations via the
Bashtool to validate code and manage the git lifecycle. - Evidence: Executes
git,npm run, andpoetry runcommands in Phase 2 and Phase 4 to perform linting, testing, and committing. It also includes ascripts/validate-conventional.shutility for message validation. - [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes
invocation_hooksto execute shell commands during the initialization phase. - Evidence:
invocation_hooksincludes agit rev-parsecommand to verify the git environment when the skill is loaded. - [DYNAMIC_EXECUTION]: The skill uses a PreToolUse hook to execute an external script at runtime.
- Evidence: The YAML frontmatter contains a
PreToolUsehook that runs${CLAUDE_PLUGIN_ROOT}/hooks/bin/run-hook.mjs. This script is used to load configurations but represents a dynamic execution point.
Audit Metadata