git-crypt
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard
gitandgit-cryptcommands for repository encryption management, key distribution, and troubleshooting. These commands are typical for the tool's documented purpose.- [DYNAMIC_EXECUTION]: Fixed Python one-liners are used to safely verify the existence of theGITCRYPTheader in staged or committed blobs. The script only reads a specific number of bytes to check for a magic string and does not evaluate arbitrary code.- [DATA_EXPOSURE_AND_EXFILTRATION]: Instructions explicitly forbid printing repository keys, private GPG keys, or decrypted file contents to the terminal. It provides methods to verify encryption state without revealing sensitive data.- [INDIRECT_PROMPT_INJECTION]: The skill operates on repository metadata and file contents. Potential risks are mitigated by instructions that prioritize non-interactive verification and explicitly warn against credential exposure during history cleanup or access management. - Ingestion points: File paths,
.gitattributesrules, and Git object metadata. - Boundary markers: The instructions provide specific command templates for the agent to follow.
- Capability inventory: Includes
gitCLI access andpython3for verification. - Sanitization: Emphasizes verifying encryption status without printing contents.
Audit Metadata