git-squash
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes standard Git commands including
git reset,git commit, andgit push --force-with-leaseto manage branch history. These commands are executed directly in the repository context and follow the user's intent to rewrite history. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted data from commit logs and diffs to generate a semantic summary. Ingestion points: commit messages and file differences retrieved via
git logandgit diff. Boundary markers: None. Capability inventory: the ability to write commit messages and push to remote viagit commitandgit push. Sanitization: No explicit sanitization or filtering of the content analyzed from the Git history is performed.
Audit Metadata