git-commit-formatter
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- COMMAND_EXECUTION (LOW): The skill uses
git diff --cachedto retrieve code changes. This is a standard local operation necessary for the skill's primary function. - PROMPT_INJECTION (LOW): Indirect Prompt Injection Surface. The skill ingests untrusted data from the local repository that may contain malicious instructions. Evidence Chain: 1. Ingestion points: Output of
git diff --cachedin SKILL.md. 2. Boundary markers: Absent. There are no instructions to ignore embedded commands within the diff content. 3. Capability inventory: Local command execution (git) and text generation. 4. Sanitization: Absent. The agent processes the raw diff output directly.
Audit Metadata