push-gate
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed as a security mechanism to prevent data exposure. It enforces strict rules against pushing uncommitted work, force-pushing, and pushing detected secrets.
- [COMMAND_EXECUTION]: The skill executes standard Git commands (
git fetch,git log,git diff,git push) and security tools (gitleaks,ripgrep) to analyze the repository state and scan for vulnerabilities. These operations are performed on the local file system and target user-specified remotes. - [EXTERNAL_DOWNLOADS]: References installation URLs for official security tools (Gitleaks and Ripgrep) in its documentation and error messages. It does not perform automated downloads or execute remote scripts during runtime.
- [DATA_EXFILTRATION]: The skill facilitates data transfer via
git push, which is its primary purpose. It actively mitigates the risk of accidental exfiltration by scanning for and blocking the transmission of sensitive files (e.g.,.env,.aws/credentials, SSH keys) and secrets (API keys, tokens).
Audit Metadata