privacy-guard

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a privacy guard using well-known security tools like gitleaks. It explicitly instructs the user to keep the 'denylist' in a gitignored .local/ directory to prevent the leakage of the sensitive patterns themselves.
  • [COMMAND_EXECUTION]: The skill provides a shell script check_privacy.sh intended for use as a git hook. The script uses standard utilities (grep, mktemp, trap) to process a local file against staged git changes. The use of mktemp and cleanup via trap follows secure scripting practices.
  • [EXTERNAL_DOWNLOADS]: The skill references the official Gitleaks GitHub repository (https://github.com/gitleaks/gitleaks) for secret scanning. This is a well-known security tool and the reference is handled neutrally as part of a standard configuration snippet.
  • [DATA_EXPOSURE]: The skill is designed specifically to prevent data exposure. The threat model clearly identifies sensitive information (IPs, hostnames, internal project names) and provides mechanisms to block their inclusion in public commits.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 08:52 AM