but
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions that fetch a shell script from the official GitButler domain at
https://gitbutler.com/install.shand pipe it to a shell. This is the official installation method for the documented service. - [COMMAND_EXECUTION]: The skill utilizes the
butCLI and standardgitcommands to perform repository management tasks, including staging files, committing changes, pushing to remotes, and creating pull requests. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by ingesting external data such as git status, diffs, and local file contents through commands like
but status --json,but diff --json, andbut pr new --file. This data is interpolated into the agent's context. The instructions mandate the use of the--jsonflag for structured output to ensure reliable parsing, which serves as a boundary marker. The skill's capabilities include filesystem modifications, git history edits, and network operations (pushing and PR creation). No explicit sanitization or filtering of external content is defined in the instructions.
Audit Metadata