git-workflow
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts,
publication_guard.pyandstack_push_guard.py, which interact with the system'sgitandgh(GitHub CLI) binaries. These scripts use subprocess calls to inspect repository status, fetch metadata via the GitHub API, and manage Git hooks to facilitate the workflow described in the documentation. - [DYNAMIC_EXECUTION]: The
stack_push_guard.pyutility employs a dynamic security mechanism by creating a temporary directory containing apre-pushGit hook. It temporarily modifies the local repository's environment configuration (core.hooksPath) to ensure that outgoing pushes are audited against an 'admission' file containing approved Git object IDs. - [OBFUSCATION]: Static analysis detected non-standard Unicode characters (Line Separator
U+2028and Next LineU+0085) within the test files. These characters are used exclusively as test data to verify that the publication guard correctly handles diverse text encodings and does not fail when encountering non-standard formatting in JSONL or branch names.
Audit Metadata