git
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it analyzes untrusted data from the repository (code changes and logs) to draft messages. \n
- Ingestion points: Repository content is ingested via
git diff,git status, andgit login thecommit.mdandpr.mdworkflows. \n - Boundary markers: There are no explicit markers or instructions to ignore potential commands embedded within the diffs or logs being analyzed. \n
- Capability inventory: The skill can perform
git commit,git push, andgh pr createoperations. \n - Sanitization: The use of quoted HEREDOCs (
cat <<'EOF') effectively prevents the generated content from triggering shell command injection.
Audit Metadata