commitpush
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The primary function of this skill is a security-enhancing workflow that screens for secrets (API keys, tokens) and sensitive file patterns before they are committed to a repository.\n- [COMMAND_EXECUTION]: The skill executes standard Git CLI commands such as
git status,git add,git commit, andgit pushto manage the version control lifecycle.\n- [PROMPT_INJECTION]: The skill analyzes untrusted repository data (logs and diffs) to generate commit messages and detect secrets.\n - Ingestion points: Reads
git log,git status, andgit diffcontent in SKILL.md (Phase 1 and Phase 3).\n - Boundary markers: Absent; instructions do not specify delimiters for external repository content.\n
- Capability inventory: Git CLI command execution across multiple scripts.\n
- Sanitization: No sanitization of repository history or change content is specified.
Audit Metadata