git-commit-cn
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is designed for local repository management and does not contain patterns associated with data exfiltration, persistence, or remote code execution.
- [COMMAND_EXECUTION]: Standard Git commands and a local Python script are used to orchestrate the commit process. These operations are limited to the user's workspace and perform expected version control tasks.
- [PROMPT_INJECTION]: The skill processes repository diffs as untrusted data. 1. Ingestion points:
git statusandgit diffoutputs in SKILL.md. 2. Boundary markers: No explicit markers are defined in the instructions to separate diff content from instructions. 3. Capability inventory: Git staging, committing, and file writing via the local Python script. 4. Sanitization: The Python script normalizes the summary output but does not sanitize the content of the diffs themselves.
Audit Metadata