destructive-git-hook

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFECOMMAND_EXECUTION

Full Analysis

[COMMAND_EXECUTION]: The skill includes a shell script (scripts/deny-destructive-git.sh) and instructions to configure it as a PreToolUse hook. While this involves command execution, the purpose is explicitly defensive: it parses incoming agent commands and returns a non-zero exit code to block high-risk git operations like reset --hard, push --force, and branch -D. This is a recommended security best practice for autonomous agents.

Audit Metadata

Risk Level

SAFE

Analyzed

Jul 14, 2026, 11:20 PM

Security Audit — agent-trust-hub — destructive-git-hook