commit
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands including
git,gh,echo, andwcto manage the version control workflow. These tools are used for repository status checks, branch management, and commit message validation.\n- [DATA_EXFILTRATION]: Performs network-enabled operations such asgit fetch originandgh repo viewto synchronize with and query remote repositories. These operations are standard for git workflows and target the repository's configured origin.\n- [PROMPT_INJECTION]: Features a security guideline that explicitly forbids staging files with sensitive information like.envfiles, credentials, or private keys, which helps prevent accidental data exposure.\n- [PROMPT_INJECTION]: The skill reads file contents throughgit diffcommands, creating a potential surface for indirect prompt injection from untrusted code changes. \n - Ingestion points:
git diffandgit diff --staged(SKILL.md)\n - Boundary markers: None present\n
- Capability inventory: Shell execution for
git,gh,echo, andwc(SKILL.md)\n - Sanitization: None present\n- [COMMAND_EXECUTION]: Uses
echo -n "<subject>" | wc -mto verify the character count of the commit subject. This involves interpolation of agent-generated text into a shell command, which is a common functional pattern for length validation.
Audit Metadata