bagisto-git-workflow
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a style guide for Git operations and does not contain any executable code, remote script downloads, or unauthorized network operations. Its primary function is to define project-specific conventions for a developer workflow.
- [DATA_EXPOSURE_EXFILTRATION]: The instructions include a specific security rule to never commit
.envfiles, credentials, or build artifacts. This demonstrates a proactive approach to preventing accidental data exposure. - [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to analyze the repository's commit history to identify established patterns. While this involves processing external data (past commit messages), the risk is mitigated by the skill's explicit constraints on sensitive data and its focus on stylistic consistency rather than dynamic command execution based on that data.
- Ingestion points: Repository commit history (referenced in
SKILL.mdfor pattern matching). - Boundary markers: Not explicitly defined for commit history parsing.
- Capability inventory: Git operations (commit, push, PR creation), dependency management (Composer/npm).
- Sanitization: None specified for historical data analysis.
Audit Metadata