toolditor-readable-commits
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various system and project-specific commands.
- Evidence: git status, git diff, git log, sed, git add, git commit, npx tsc, and npm test.
- Context: These are standard operations for a git-integrated development tool used within a project's local environment.
- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection via the files and logs it processes.
- Ingestion points: Output from git status, git diff, git log, and local files like .husky/commit-msg and commitlint.config.ts.
- Boundary markers: Absent.
- Capability inventory: Execution of git operations and project scripts via npm.
- Sanitization: Absent.
Audit Metadata