gitnexus-plan
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard developer tools including
gitandgitnexusto perform graph analysis and repository navigation. These operations are scoped to the intended purpose of the skill. - [DYNAMIC_EXECUTION]: The skill invokes local repository tooling via
node .gitnexus/run.cjsand global tools vianpx gitnexus. This is consistent with its role as an engineering assistant and is used to ensure the analysis index is fresh. - [SAFE]: The inclusion of
scripts/evidence-provenance.mjsdemonstrates a high level of security awareness. The script implements SHA-256 hashing for evidence verification and uses atomic file operations (likelink(2)) combined withO_NOFOLLOWandO_DIRECTORYto prevent symlink-based race conditions during plan publication. - [SAFE]: The skill defines strict 'Hard rules' and 'Phases' that limit its capabilities to planning only. It specifically prohibits modifying production source code, tests, or configuration files, which effectively mitigates risks associated with unintended autonomous actions.
Audit Metadata