git-commit
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's workflow involves executing several git CLI commands:
git statusto check the current repository state,git diff --stagedto analyze code changes, andgit log -5 --onelineto understand recent commit patterns. These are necessary for the skill's primary function. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection (Category 8) because it ingests and processes untrusted data from the local repository.
- Ingestion points: The agent reads the output of
git diff --stagedandgit logwhich contains code and comments from the repository. - Boundary markers: Absent; there are no instructions or delimiters used to ensure the agent ignores instructions that might be contained within the code changes themselves.
- Capability inventory: The skill utilizes git commands and expects the agent to generate text based on those results.
- Sanitization: Absent; the skill does not include logic to filter or escape the content extracted from the repository before it is processed by the AI.
Audit Metadata