git-advanced
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of educational Git commands and shell script templates intended for developer productivity and repository management.
- [INDIRECT_PROMPT_INJECTION]: The skill documents an attack surface via Git hooks that process user-controlled data.
- Ingestion points: The
commit-msghook example reads external input from a commit message file ($1). - Boundary markers: None present in the bash script template.
- Capability inventory: Shell script execution (bash) and Git command operations.
- Sanitization: Employs regex validation using
grep -qEto enforce specific commit message formats, which serves as a basic safety filter. - [EXTERNAL_DOWNLOADS]: The documentation references official GitHub repositories and standard industry tools like
git-filter-repoandBFG Repo-Cleanerfor maintenance tasks. These are well-known resources in the developer community and do not represent a security risk.
Audit Metadata