skills/lassejlv/skills/gitty/Gen Agent Trust Hub

gitty

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions for installing the gitty CLI tool directly from a remote Git repository (github.com/lassejlv/gitty) using cargo install. The instructions explicitly direct the agent to inform the user and offer the command rather than performing a silent installation.
  • [COMMAND_EXECUTION]: The skill operates by executing shell commands via the gitty binary to inspect repository states, generate messages through AI providers, and perform Git mutations (commit/push). These operations are governed by instructions requiring explicit user authorization for any state-changing actions.
  • [DATA_EXPOSURE]: The tool transmits repository diffs to external AI providers (such as Codex or Claude) to generate commit messages. It includes a built-in credential redaction feature, and the skill instructions advise users to preview the redacted diff using gitty diff to verify what data is being shared.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 04:06 PM
Security Audit — agent-trust-hub — gitty