skills/gaboe/opencode-gitbutler/but/Gen Agent Trust Hub

but

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides installation instructions that fetch a shell script from the official GitButler domain at https://gitbutler.com/install.sh and pipe it to a shell. This is the official installation method for the documented service.
  • [COMMAND_EXECUTION]: The skill utilizes the but CLI and standard git commands to perform repository management tasks, including staging files, committing changes, pushing to remotes, and creating pull requests.
  • [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by ingesting external data such as git status, diffs, and local file contents through commands like but status --json, but diff --json, and but pr new --file. This data is interpolated into the agent's context. The instructions mandate the use of the --json flag for structured output to ensure reliable parsing, which serves as a boundary marker. The skill's capabilities include filesystem modifications, git history edits, and network operations (pushing and PR creation). No explicit sanitization or filtering of external content is defined in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 01:48 PM