git-guardrails-claude-code
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill modifies the Claude Code settings file (~/.claude/settings.json or .claude/settings.json) to register a PreToolUse hook. This configuration ensures the safety script is executed automatically before every tool invocation in future sessions.
- [COMMAND_EXECUTION]: The setup process involves making a bundled bash script executable using chmod +x. This script is then called by the Claude Code environment to validate commands.
- [SAFE]: The logic within the block-dangerous-git.sh script is transparent and limited to string matching against a predefined list of dangerous git patterns. No network operations, sensitive data access, or obfuscation were detected.
Audit Metadata