keeping-git-repos-clean
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is strictly educational and provides standard Git command-line instructions for repository maintenance.
- [EXTERNAL_DOWNLOADS]: The skill references configuration for
gitleaksanddetect-secretsfrom their official GitHub repositories (gitleaks/gitleaks and Yelp/detect-secrets). These are well-known security tools and trusted organizations. - [COMMAND_EXECUTION]: Provides standard Git commands (e.g.,
git rm --cached,git ls-files,git config) and basic shell operations (printf,rsync,mktemp) for repository cleanup. These are safe, local-only operations intended for user execution. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The YAML snippets for pre-commit hooks are configuration templates, not active execution scripts.
- [CREDENTIALS_UNSAFE]: The skill mentions common credential patterns (like
AWS_*or.env) for the purpose of teaching users how to exclude them from repositories. No actual hardcoded secrets are present.
Audit Metadata