gitty
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions for installing the
gittyCLI tool directly from a remote Git repository (github.com/lassejlv/gitty) usingcargo install. The instructions explicitly direct the agent to inform the user and offer the command rather than performing a silent installation. - [COMMAND_EXECUTION]: The skill operates by executing shell commands via the
gittybinary to inspect repository states, generate messages through AI providers, and perform Git mutations (commit/push). These operations are governed by instructions requiring explicit user authorization for any state-changing actions. - [DATA_EXPOSURE]: The tool transmits repository diffs to external AI providers (such as Codex or Claude) to generate commit messages. It includes a built-in credential redaction feature, and the skill instructions advise users to preview the redacted diff using
gitty diffto verify what data is being shared.
Audit Metadata