git-commit
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements standard Git workflow automation for staging and committing code changes without suspicious system or network behavior.\n- [COMMAND_EXECUTION]: The skill utilizes local Git commands (
git status,git add,git diff,git reset,git commit) to perform its primary function. Operations are strictly confined to the local repository environment.\n- [DATA_EXFILTRATION]: The guidelines explicitly prohibit staging sensitive information like environment variables, credentials, or private keys, which mitigates the risk of accidental data exposure.\n- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface. 1. Ingestion points: Untrusted data enters the context viagit diff --cachedexecution inSKILL.md. 2. Boundary markers: None are defined to separate code content from instructions. 3. Capability inventory: The agent can executegit add,git reset, andgit commitcommands. 4. Sanitization: There is no evidence of escaping or filtering diff content before it is analyzed to generate commit messages.
Audit Metadata