commit-and-push-jp
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands such as
git commit,git push, andpnpm(for linting and testing). These commands are necessary for the primary function of the skill and are restricted to the local repository context. - [DATA_EXFILTRATION]: Network activity is limited to
git pushoperations to theoriginremote. This is the expected behavior for a tool designed to synchronize code with a remote repository. - [REMOTE_CODE_EXECUTION]: No patterns of downloading and executing arbitrary remote code or unverified scripts were found. The skill relies on local environment scripts (
pnpm lint,pnpm test) defined by the project's own configuration. - [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface as it reads
git diffandgit statusoutput from the local working tree. While this data is untrusted, the skill operates within the established parameters of a development agent, and no exploitation patterns were observed.
Audit Metadata