commit-push-pr
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] (LOW): The skill uses the Bash tool to execute Git and GitHub CLI commands. This is required for the skill's primary function but relies on a properly configured local environment.
- [PROMPT_INJECTION] (LOW): (Category 8: Indirect Prompt Injection) The skill reviews untrusted data from the local repository during quality checks and commit message generation. 1. Ingestion points: Staged changes are read via 'git diff --staged' and 'grep'. 2. Boundary markers: No specific delimiters are used to separate code content from instructions. 3. Capability inventory: The agent has Bash, Edit, and Write tools available. 4. Sanitization: Code content is not sanitized or escaped before processing.
Audit Metadata