secrets-with-git-crypt
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands via the
scripts/git-crypt-helper.shscript to manage secret encryption and decryption. This includes standard git-crypt operations (git-crypt init,git-crypt unlock,git-crypt export-key) and filesystem operations (cp,mkdir,grep,find) to maintain parallel.encfiles and ensure unencrypted files are added to.gitignore. - [COMMAND_EXECUTION]: The helper script includes an
installcommand that usessudo apt-get install git-cryptto install the required utility on Debian-based systems if it is missing. This is a standard system administrative task relevant to the skill's primary purpose. - [SAFE]: All operations are performed locally within the git repository and directed at user-specified key paths (e.g.,
~/secure-keys/). The skill includes specific verification steps and warnings to ensure sensitive keys and plaintext secrets are not committed to version control.
Audit Metadata