commit-helper

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute git commands such as git status, git diff, and git diff --cached. These are used to analyze staged changes for the purpose of generating commit messages.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted data from the repository.\n
  • Ingestion points: Git diff output and file contents are read via git diff and the Read tool as defined in SKILL.md.\n
  • Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the processed diff data.\n
  • Capability inventory: The skill has access to bash command execution and file system reading tools.\n
  • Sanitization: No validation or sanitization is performed on the content of the files being analyzed.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 10:55 AM