krt-gitflow-knight
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Python scripts to interact with the local Git installation and execute repository management commands.
scripts/create_approved_commit.pyusessubprocess.runto executegit add,git commit, andgit diffcommands.scripts/ensure_krt_env_ignore.pyusessubprocess.runto executegit ls-filesandgit check-ignoreto verify repository state.- [DATA_EXPOSURE]: The skill explicitly scans for and handles sensitive file paths to ensure they are protected from accidental exposure in the repository history.
- The scripts are configured to detect and block staging for sensitive paths such as
.krt/env/jira-scribe.envand generic.envfiles. scripts/create_approved_commit.pycontains a regex-based scanner (SECRET_ASSIGNMENT) that inspects staged changes for secret-like environment variable assignments (e.g.,API_KEY,PRIVATE_KEY).- [DYNAMIC_EXECUTION]: The primary commit script dynamically executes a secondary local verification script to check environment status.
scripts/create_approved_commit.pyinvokesscripts/ensure_krt_env_ignore.pyusingsys.executableto validate that security guardrails are active before proceeding with a commit.
Audit Metadata