skills/yz0812/skills/git-commit/Gen Agent Trust Hub

git-commit

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a set of standard Git commands (git status, git diff, git add, and git commit) to perform its primary function of version control management. These actions are directed at the local repository and do not involve unauthorized file system modifications outside the .git directory.
  • [PROMPT_INJECTION]: The skill processes untrusted external data by reading the output of git diff and historical commit logs (SKILL.md, Phases 2 and 6). This defines an indirect prompt injection surface where code changes or previous messages could contain instructions designed to influence the agent's output. The capability inventory for this surface includes executing git add and git commit. While specific boundary markers or sanitization logic for the diff data are not mentioned, the overall risk is mitigated by the tool's focused purpose of text summarization.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 01:08 PM