unfuck-my-git-state

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses localized shell scripts (snapshot_git_state.sh, guided_repair_plan.sh, regression_harness.sh) to execute standard Git commands for diagnostic and repair purposes. These operations are performed within the local repository context and are necessary for the skill's functionality.
  • [DATA_EXPOSURE]: Repository metadata, such as Git refs, branch names, and worktree paths, are captured and stored in a local .git-state-snapshots directory. This data is used exclusively for troubleshooting and is not transmitted externally. The skill also recommends manual backups of the .git directory before high-risk operations.
  • [SAFE]: The provided scripts demonstrate secure coding practices, including robust error handling (set -euo pipefail), the use of quoted heredocs to prevent unintended shell expansion, and the implementation of verification gates that require human review before final recovery steps.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 06:19 PM
Security Audit — agent-trust-hub — unfuck-my-git-state