privacy-guard

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the official gitleaks repository (github.com/gitleaks/gitleaks) to perform secret scanning. Gitleaks is a widely recognized open-source tool for detecting hardcoded secrets.- [COMMAND_EXECUTION]: The skill provides a local shell script (check_privacy.sh) designed to be executed as a git pre-commit hook. The script uses standard system utilities such as grep and mktemp to identify sensitive tokens based on user-defined patterns.- [DATA_EXFILTRATION]: The skill is specifically architected to mitigate data exfiltration risks. It instructs users to maintain a private denylist in a .local/ directory and provides clear guidance on ensuring this directory is excluded from version control via .gitignore.- [INDIRECT_PROMPT_INJECTION]: The skill reviews external data sourced from the repository's files and git diffs to detect privacy leaks.
  • Ingestion points: The agent and the shell script read staged files and diff content from the local repository.
  • Boundary markers: The content under review is not wrapped in specific delimiters.
  • Capability inventory: The skill has the capability to read local files and execute bash scripts.
  • Sanitization: The skill performs direct pattern matching on the content to ensure all potentially sensitive tokens are identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 09:30 PM
Security Audit — agent-trust-hub — privacy-guard