split-commits
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Git commands (
git status,git diff,git add,git commit,git reset) to manage repository state. These operations are essential for the skill's primary purpose of commit management. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local environment via
git diff --staged. While it lacks explicit boundary markers to warn the model about potential instructions embedded in code comments or strings, the risk is mitigated by a structured workflow and the use of quoted shell heredocs ('EOF') which prevents shell injection when generating commit messages. - Ingestion points:
git diff --staged(SKILL.md) - Boundary markers: Absent
- Capability inventory:
git add,git commit,git reset,git status(SKILL.md) - Sanitization: Employs quoted heredocs in shell commands to prevent command/variable expansion.
Audit Metadata