commit
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The instructions focus entirely on following the conventional commit standard. It guides the agent to read
git statusandgit diffto understand code changes, which is appropriate for its stated purpose. - [COMMAND_EXECUTION]: The skill performs local Git operations such as
git statusandgit commit. These actions are restricted to the local environment and the skill explicitly forbids automaticgit pushoperations, maintaining user control over remote changes. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of Git diffs. While this represents a data ingestion surface, the risk is negligible as the skill lacks high-privilege capabilities (like network access or arbitrary code execution) that could be triggered by malicious content within a diff. The instructions prioritize accuracy and session context to mitigate misinterpretation.
Audit Metadata