gitnexus-plan

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard developer tools including git and gitnexus to perform graph analysis and repository navigation. These operations are scoped to the intended purpose of the skill.
  • [DYNAMIC_EXECUTION]: The skill invokes local repository tooling via node .gitnexus/run.cjs and global tools via npx gitnexus. This is consistent with its role as an engineering assistant and is used to ensure the analysis index is fresh.
  • [SAFE]: The inclusion of scripts/evidence-provenance.mjs demonstrates a high level of security awareness. The script implements SHA-256 hashing for evidence verification and uses atomic file operations (like link(2)) combined with O_NOFOLLOW and O_DIRECTORY to prevent symlink-based race conditions during plan publication.
  • [SAFE]: The skill defines strict 'Hard rules' and 'Phases' that limit its capabilities to planning only. It specifically prohibits modifying production source code, tests, or configuration files, which effectively mitigates risks associated with unintended autonomous actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 08:16 PM