git-commit
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a set of standard Git commands (
git status,git diff,git add, andgit commit) to perform its primary function of version control management. These actions are directed at the local repository and do not involve unauthorized file system modifications outside the.gitdirectory. - [PROMPT_INJECTION]: The skill processes untrusted external data by reading the output of
git diffand historical commit logs (SKILL.md, Phases 2 and 6). This defines an indirect prompt injection surface where code changes or previous messages could contain instructions designed to influence the agent's output. The capability inventory for this surface includes executinggit addandgit commit. While specific boundary markers or sanitization logic for the diff data are not mentioned, the overall risk is mitigated by the tool's focused purpose of text summarization.
Audit Metadata