git-commit-helper

Pass

Audited by Gen Agent Trust Hub on Mar 22, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses git diff --cached to retrieve staged changes. This is a read-only operation necessary for generating commit messages and is executed within the local repository context.
  • [PROMPT_INJECTION]: The skill analyzes external code content which creates an indirect prompt injection surface. * Ingestion points: staged code changes via git diff --cached (SKILL.md). * Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the analysis step. * Capability inventory: Subprocess call to git diff --cached (SKILL.md). * Sanitization: No sanitization of the diff output is performed. Because the skill lacks sensitive capabilities such as network access or file-writing, this surface does not pose a functional risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 22, 2026, 02:46 AM