keeping-git-repos-clean
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [SAFE]: The skill is a defensive educational resource designed to improve repository security by preventing credential leakage.
- [COMMAND_EXECUTION]: Instructs the agent on using standard git and shell commands to manage repository state, audit tracked files, and handle temporary directories (e.g.,
git ls-files,git rm --cached,rsync,mktemp). - [EXTERNAL_DOWNLOADS]: The skill mentions well-known security tools like Gitleaks and Yelp's detect-secrets within example configuration files for pre-commit hooks. These are established industry-standard tools.
- [CREDENTIALS_UNSAFE]: Identifies sensitive file patterns and extensions (e.g.,
.env,.pem,.key,AWS_*) for the explicit purpose of instructing users to exclude them from version control. It correctly recommends using.envfor local secrets, which is a standard security practice.
Audit Metadata