krt-gitflow-knight

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes Python scripts to interact with the local Git installation and execute repository management commands.
  • scripts/create_approved_commit.py uses subprocess.run to execute git add, git commit, and git diff commands.
  • scripts/ensure_krt_env_ignore.py uses subprocess.run to execute git ls-files and git check-ignore to verify repository state.
  • [DATA_EXPOSURE]: The skill explicitly scans for and handles sensitive file paths to ensure they are protected from accidental exposure in the repository history.
  • The scripts are configured to detect and block staging for sensitive paths such as .krt/env/jira-scribe.env and generic .env files.
  • scripts/create_approved_commit.py contains a regex-based scanner (SECRET_ASSIGNMENT) that inspects staged changes for secret-like environment variable assignments (e.g., API_KEY, PRIVATE_KEY).
  • [DYNAMIC_EXECUTION]: The primary commit script dynamically executes a secondary local verification script to check environment status.
  • scripts/create_approved_commit.py invokes scripts/ensure_krt_env_ignore.py using sys.executable to validate that security guardrails are active before proceeding with a commit.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 09:06 AM