gitnexus-cli
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run CLI commands via a project-local runner script located at
.gitnexus/run.cjs. These commands manage repository analysis and indexing. - [EXTERNAL_DOWNLOADS]: The documentation describes using
npx,bunx, orpnpm dlxto download and execute thegitnexuspackage and its dependencies from public registries to set up the environment. - [DATA_EXFILTRATION]: The
wikicommand can export repository metadata and generated documentation to external LLM providers and GitHub Gists. It also mentions storing API keys in~/.gitnexus/config.jsonfor persistence across sessions. - [INDIRECT_PROMPT_INJECTION]: The tool builds a knowledge graph by parsing source files in the repository. This graph is used as a data source for LLM documentation generation, creating a surface where malicious code comments could potentially influence the generated wiki content.
- Ingestion points: Source files throughout the project are parsed by the
analyzecommand as described inSKILL.md. - Boundary markers: No specific delimiters are mentioned to separate code content from instructions during the parsing or documentation generation phases.
- Capability inventory: Includes local script execution (
node), network-based LLM requests, and GitHub Gist publishing. - Sanitization: The documentation does not specify any sanitization or filtering of the source code before it is processed into the knowledge graph.
Audit Metadata