commit-history
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure coding practices by explicitly recommending the use of
URLSearchParamsorencodeURIComponentto prevent query string corruption or parameter injection during REST API calls. This mitigates risks associated with handling potentially untrusted input in URL parameters. - [SAFE]: Data ingestion is limited to git commit metadata (messages, SHAs, timestamps) retrieved via the
memory_commitstool. The skill's primary function is to render this information in a list format, and it lacks dangerous capabilities such as file system writes, arbitrary shell execution, or unauthorized external network requests. - [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were detected. The skill's behavior matches its stated purpose of managing agent-linked commit history.
Audit Metadata