commit-detection
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to run standard Git operations such asgit diffandgit diff --stat. It also uses basic Unix utilities likegrep,cut, andsortto process the output of these commands for repository analysis. - [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface where it processes untrusted data from the local repository (file names and diff content) to make logic decisions.
- Ingestion points: Untrusted data enters the context via
git diffoutput as described inSKILL.md. - Boundary markers: None present.
- Capability inventory: The skill has access to
BashandReadtools for executing shell commands and reading file contents. - Sanitization: No explicit sanitization of the Git output is mentioned in the logic flow.
Audit Metadata