atomicity-commit
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository's git diffs and commit history to generate its output. If an attacker embeds malicious instructions within code comments or commit messages in the analyzed history, the agent could potentially be manipulated.
- Ingestion points: The skill uses
git diff --stagedandgit logto gather context from the local repository (SKILL.md). - Boundary markers: There are no explicit instructions or delimiters used to separate the content of the diff from the agent's instructions, nor are there warnings to ignore embedded commands.
- Capability inventory: The skill is authorized to perform repository modifications including
git add,git restore, andgit commit(SKILL.md). - Sanitization: The skill does not perform sanitization, escaping, or validation of the text extracted from the git diffs before using it to draft the commit message.
Audit Metadata