git-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content regarding Git version control branching strategies, commit conventions, and release management.
- [SAFE]: It promotes secure development practices by advising users to include environment files (such as
.env) in.gitignoreto prevent the accidental exposure of credentials. - [SAFE]: The documentation includes a shell script example for a pre-commit hook that uses
grepto scan staged changes for potential secrets (e.g., "password", "api_key"), which is a proactive security measure. - [EXTERNAL_DOWNLOADS]: The documentation references
npx conventional-changelog. This command invokes the well-known npm package runner to fetch and execute a standard utility from the official registry for generating changelogs.
Audit Metadata