commit-helper
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute git commands such as
git status,git diff, andgit diff --cached. These are used to analyze staged changes for the purpose of generating commit messages.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted data from the repository.\n - Ingestion points: Git diff output and file contents are read via
git diffand theReadtool as defined inSKILL.md.\n - Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the processed diff data.\n
- Capability inventory: The skill has access to bash command execution and file system reading tools.\n
- Sanitization: No validation or sanitization is performed on the content of the files being analyzed.
Audit Metadata