cherry-pick-commits
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected in the skill's instructions or metadata. The skill focuses on local Git operations and includes explicit safety guidelines for the agent to prevent common attack vectors like command injection and unauthorized data exfiltration.
- [SAFE]: The skill explicitly instructs the agent to treat revisions and paths as untrusted input, requiring full OID resolution and the termination of option parsing to prevent manipulation of Git command behavior.
- [SAFE]: Network exfiltration is mitigated by an explicit prohibition on the 'push' command.
Audit Metadata