git-commit-helper
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git diff --cachedto retrieve staged changes. This is a read-only operation necessary for generating commit messages and is executed within the local repository context. - [PROMPT_INJECTION]: The skill analyzes external code content which creates an indirect prompt injection surface. * Ingestion points: staged code changes via
git diff --cached(SKILL.md). * Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the analysis step. * Capability inventory: Subprocess call togit diff --cached(SKILL.md). * Sanitization: No sanitization of the diff output is performed. Because the skill lacks sensitive capabilities such as network access or file-writing, this surface does not pose a functional risk.
Audit Metadata