commit-messages
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Executes standard git commands including
git status,git diff, andgit logusing the Bash tool to analyze repository state and staged changes.- [DATA_EXPOSURE]: Reads local repository information such as diffs and commit history to provide the necessary context for message generation. No data is transmitted externally.- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from git diffs and logs. Although it lacks explicit boundary markers or sanitization for this input, the associated risk is minimal as the primary output is a text file (commit_msg.txt) and the skill does not execute code derived from the diffs.
Audit Metadata