commit

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The instructions focus entirely on following the conventional commit standard. It guides the agent to read git status and git diff to understand code changes, which is appropriate for its stated purpose.
  • [COMMAND_EXECUTION]: The skill performs local Git operations such as git status and git commit. These actions are restricted to the local environment and the skill explicitly forbids automatic git push operations, maintaining user control over remote changes.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of Git diffs. While this represents a data ingestion surface, the risk is negligible as the skill lacks high-privilege capabilities (like network access or arbitrary code execution) that could be triggered by malicious content within a diff. The instructions prioritize accuracy and session context to mitigate misinterpretation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 05:08 PM
Security Audit — agent-trust-hub — commit