privacy-guard
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the official
gitleaksrepository (github.com/gitleaks/gitleaks) to perform secret scanning. Gitleaks is a widely recognized open-source tool for detecting hardcoded secrets.- [COMMAND_EXECUTION]: The skill provides a local shell script (check_privacy.sh) designed to be executed as a git pre-commit hook. The script uses standard system utilities such asgrepandmktempto identify sensitive tokens based on user-defined patterns.- [DATA_EXFILTRATION]: The skill is specifically architected to mitigate data exfiltration risks. It instructs users to maintain a private denylist in a.local/directory and provides clear guidance on ensuring this directory is excluded from version control via.gitignore.- [INDIRECT_PROMPT_INJECTION]: The skill reviews external data sourced from the repository's files and git diffs to detect privacy leaks. - Ingestion points: The agent and the shell script read staged files and diff content from the local repository.
- Boundary markers: The content under review is not wrapped in specific delimiters.
- Capability inventory: The skill has the capability to read local files and execute bash scripts.
- Sanitization: The skill performs direct pattern matching on the content to ensure all potentially sensitive tokens are identified.
Audit Metadata