kmcp-dev-git-index-repair
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill recommends using
sudo fs_usageon macOS to monitor file system activity related to the Git index. This command requires administrative privileges for system-level diagnostics. - [COMMAND_EXECUTION]: The skill instructs the agent to execute local shell scripts, specifically
.husky/pre-commit, usingsh -xto trace execution and debug hook failures. - [PROMPT_INJECTION]: The instructions establish a trust relationship with external repository content by directing the agent to treat the
.husky/pre-commitfile as the 'hook authority' and to re-read it before automating any cleanup or repair tasks. This creates a surface for indirect prompt injection if the local repository file is modified by an untrusted source.
Audit Metadata