git-commit
Pass
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill executes standard local git commands (
git diff,git status,git commit) required for its primary purpose of analyzing changes and committing them. - [PROMPT_INJECTION] (LOW): Susceptible to indirect prompt injection (Category 8) because it processes untrusted file content through git analysis tools.
- Ingestion points:
git diff --cachedandgit diffoutputs are read into the agent's context as specified inSKILL.md. - Boundary markers: Absent. The workflow does not specify delimiters or instructions to ignore embedded commands within the diff output.
- Capability inventory: Subprocess execution of
gitcommands. - Sanitization: Absent. File content is analyzed directly without filtering for potential injection strings.
Audit Metadata