daily
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Executes local
gitcommands and a bundled shell script (git-stats.sh) to retrieve commit logs and statistics. This is restricted to local repositories configured by the user. - [DATA_EXFILTRATION]: Accesses local configuration files, repository history, and a local knowledge vault to aggregate data. Analysis confirmed no network requests, remote downloads, or external data transfer logic is present.
- [INDIRECT_PROMPT_INJECTION]: Processes git commit messages and local JSON entries as untrusted data sources. While these could contain instructions designed to influence the agent's summary output, the risk is limited to the content of the generated markdown note and is inherent to the skill's primary function.
Audit Metadata