git-workflow

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes Python scripts, publication_guard.py and stack_push_guard.py, which interact with the system's git and gh (GitHub CLI) binaries. These scripts use subprocess calls to inspect repository status, fetch metadata via the GitHub API, and manage Git hooks to facilitate the workflow described in the documentation.
  • [DYNAMIC_EXECUTION]: The stack_push_guard.py utility employs a dynamic security mechanism by creating a temporary directory containing a pre-push Git hook. It temporarily modifies the local repository's environment configuration (core.hooksPath) to ensure that outgoing pushes are audited against an 'admission' file containing approved Git object IDs.
  • [OBFUSCATION]: Static analysis detected non-standard Unicode characters (Line Separator U+2028 and Next Line U+0085) within the test files. These characters are used exclusively as test data to verify that the publication guard correctly handles diverse text encodings and does not fail when encountering non-standard formatting in JSONL or branch names.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 05:35 PM