git-commit-enterprise
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard git commands (status, diff, add, commit) to manage the repository state. The execution of the git commit command is implemented using a quoted heredoc pattern (EOF in single quotes) which safely handles multi-line strings and prevents potential shell expansion or injection attacks from generated content.- [SAFE]: The included script 'scripts/validate_commit.py' is a self-contained Python utility that performs regex-based validation using the standard library. It does not access the network, modify the filesystem, or use dangerous functions like eval or exec.- [DATA_EXFILTRATION]: There is no evidence of data exfiltration. The skill's operations are entirely local to the user's Git repository, and it does not contain any code for network communication or accessing sensitive credentials.- [PROMPT_INJECTION]: The prompt instructions are focused on Git workflows and do not contain any directives intended to bypass safety filters or override system instructions.
Audit Metadata