git-commits
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it ingests and processes untrusted data from git logs and diffs.
- Ingestion points: Reads output from
git statusandgit diff(SKILL.md). - Boundary markers: Absent; the skill does not instruct the agent to ignore instructions embedded in the analyzed code.
- Capability inventory: The agent has the capability to run shell commands (git) and read files.
- Sanitization: Absent; there is no filtering or escaping of content retrieved from the repository.
Audit Metadata