setup
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with git and the git-agent CLI tool for project setup and repository configuration.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill accesses local git configuration (user.name and user.email) to verify identity. The git-agent init command appears to interact with a backend service as indicated by the authentication error handling (401 retry with --free), which is expected behavior for the tool's intended use.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from .gitignore files to preserve custom rules. While it uses specific markers to isolate tool-generated content, there is a minor surface for instructions embedded in external files to be processed during the read/edit cycle.
Audit Metadata