commit-push
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a security-first approach to Git management. It includes an 'Ignore vs Commit Gate' that explicitly blocks sensitive files like
.env, private keys, and credential stores from being staged or committed. It uses safe command execution patterns, such as HEREDOC for Git commits, to prevent shell injection from generated commit messages. The workflow requires verification steps, including dry-runs and post-push state checks, ensuring the integrity of the remote repository operations.
Audit Metadata