ship
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands including
gitfor repository management andnpmfor running linting and tests. - [DATA_EXFILTRATION]: The skill utilizes
git pushto transfer local data to a remote repository. It employsgit add -Ato stage all changes, which creates a risk of accidentally committing and pushing sensitive files or hardcoded secrets that have not been manually reviewed. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) as it processes data from local files to drive behavior.
- Ingestion points: Reads
package.jsonto identify scripts andgit log/git diffto generate commit messages. - Boundary markers: Absent; the skill does not use delimiters or instructions to ignore embedded commands in the files it reads.
- Capability inventory: Possesses shell execution capabilities via
gitandnpm. - Sanitization: Absent; it executes scripts directly from the project configuration.
Audit Metadata