git-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill consists of documentation and local utility scripts aimed at improving Git hygiene. A review of the Bash scripts and reference materials confirms that no malicious behavior, credential harvesting, or unauthorized data exfiltration is present.
- [COMMAND_EXECUTION]: The provided scripts,
scripts/branch-status.shandscripts/check-commit-msg.sh, execute standard local Git commands such asgit for-each-ref,git rev-list, andgit interpret-trailers. These operations are transparent, scoped to the current repository, and serve legitimate development purposes. - [EXTERNAL_DOWNLOADS]: The workflow documentation and scripts reference official developer tools including the GitHub CLI (
gh) and GitLab CLI (glab). These references are treated as safe given their status as well-known services. The scripts use these tools solely to enrich local branch data with pull request status, and their use is optional.
Audit Metadata