git-commit-trailers
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git interpret-trailers,git log, andgit configtools alongside standard utilities likegrep,sort,uniq, andcutas defined in theallowed-toolsand command examples inSKILL.md. - [PROMPT_INJECTION]: (1) Ingestion points: Untrusted data enters the agent context via the output of
git logcommands. (2) Boundary markers: There are no specific delimiters or instructions provided to the agent to disregard embedded commands within commit messages. (3) Capability inventory: The skill allows for reading repository history and modifying configuration settings. (4) Sanitization: No content-based filtering or sanitization is applied to the metadata extracted from commit logs.
Audit Metadata