git-guardrails-claude-code
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to increase safety by intercepting and blocking potentially dangerous Git commands. It provides a bash script that validates commands against a list of known destructive patterns.
- [COMMAND_EXECUTION]: The skill instructs the agent to install a bash script (
scripts/block-dangerous-git.sh) and apply executable permissions (chmod +x). This is the intended behavior for deploying the hook and is performed on the skill's own bundled resources. - [PERSISTENCE]: The skill modifies
~/.claude/settings.jsonor a project-level equivalent to register thePreToolUsehook. While this creates a persistent configuration change, it is the primary purpose of the skill as documented and serves a defensive role. - [DATA_EXPOSURE]: No sensitive data exposure was detected. The script processes tool input locally using
jqandgrepwithout making network requests or accessing credentials.
Audit Metadata