checkin
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is configured to execute specific shell commands including
git status,git diff,npm test, andnpm run lint. These are standard tools for the stated purpose of pre-commit verification and are restricted to specific command prefixes within the tool definitions. - [PROMPT_INJECTION]: The skill includes instructions that explicitly define constraints for the AI agent, such as requiring user confirmation before executing commits and prohibiting automatic execution of
git addorgit push. These act as safety guardrails rather than malicious injections. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local repository.
- Ingestion points: Reads project files,
git diffoutput, andCONTRIBUTING.mdusingRead,Grep, andGlobtools. - Boundary markers: None explicitly defined to separate untrusted file content from system instructions.
- Capability inventory: Executes local scripts via
npm testandnpm run lintand performs file system reads. - Sanitization: No explicit sanitization or escaping of the ingested file content is mentioned, relying on the agent's internal handling.
Audit Metadata