devops-git-config
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [DATA_EXFILTRATION]: The skill identifies and accesses sensitive file system locations, including SSH private key paths (e.g.,
~/.ssh/id_ed25519) and environment configuration files (.env), which are then used to set up Git identity and connection parameters.\n- [COMMAND_EXECUTION]: The script executes shell commands to update Git configurations. It interpolates variables retrieved from an external file (.claude-organic/.env) directly into command strings (e.g.,git config $SCOPE core.sshCommand ...). This presents a surface for command or parameter injection if those variables are not strictly sanitized by the referenced utility script.\n- [EXTERNAL_DOWNLOADS]: The skill references and sources a local utility file_env-utils.sh. Since the content of this utility is not provided within the skill's main file, its specific security logic and sanitization routines cannot be fully verified.
Audit Metadata