Skills
skills/derailed-dash/dazbo-agent-skills/secrets-with-git-crypt/Gen Agent Trust Hub

secrets-with-git-crypt

Fail

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: HIGHCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The helper script scripts/git-crypt-helper.sh utilizes sudo to install the git-crypt package, which involves executing system commands with administrative privileges.
  • [CREDENTIALS_UNSAFE]: The skill explicitly targets and interacts with sensitive local files such as .env, *.tfvars, sec.json, and private encryption keys during synchronization and setup tasks.
  • [PROMPT_INJECTION]: The skill defines a workflow that ingests user-provided file paths for key management without input validation. Ingestion points: SKILL.md (user-supplied paths for key files). Boundary markers: absent. Capability inventory: file system access and shell command execution in scripts/git-crypt-helper.sh. Sanitization: absent.
  • [COMMAND_EXECUTION]: The helper script uses shell variables derived from user-provided arguments in commands like cp and mkdir, creating a potential surface for command injection if the agent receives malicious path strings.
  • [EXTERNAL_DOWNLOADS]: The skill initiates the download and installation of the git-crypt utility from official system package repositories.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jul 6, 2026, 07:02 AM
Security Audit — agent-trust-hub — secrets-with-git-crypt