update-submitter
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes standard git binaries (
git status,git diff,git add,git commit) to analyze and manage local repository state. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests untrusted content from file modifications via
git diff. 1. Ingestion points:git diffandgit statusoutput in SKILL.md; 2. Boundary markers: None; 3. Capability inventory:git addandgit commitin SKILL.md; 4. Sanitization: None, though the workflow includes a mandatory user confirmation step which serves as a manual validation gate.
Audit Metadata