git-commit
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes standard version control commands (git status, diff, add, commit) through the Bash tool for repository management.- [SAFE]: It contains explicit safety directives to prevent the accidental inclusion of sensitive files, such as environment variables and private keys, in commits.- [SAFE]: A Git Safety Protocol is established to restrict destructive operations like force pushing or hard resets, ensuring they are only performed upon explicit user request.- [PROMPT_INJECTION]: The skill processes untrusted data from file diffs and repository status (SKILL.md) to generate commit messages, representing an indirect prompt injection surface. Ingestion points: git diff and status output (SKILL.md). Boundary markers: Absent. Capability inventory: git add and git commit subprocess calls (SKILL.md). Sanitization: Absent. The risk is assessed as safe because the influence is limited to the text of the generated commit message and does not affect command execution logic.
Audit Metadata