git-repo-beginner-guide
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data from Git repositories, creating a surface for indirect prompt injection where malicious repository content could potentially influence agent behavior.
- Ingestion points: Git repository file contents, commit messages, and remote metadata processed during status checks and synchronization.
- Boundary markers: The skill lacks explicit character delimiters to isolate untrusted content from internal instructions.
- Capability inventory: Execution of
gitandghshell commands, including network synchronization (push/pull) and file system modifications (commit/merge). - Sanitization: The skill enforces best practices for credential management, guiding users to secure CLI-based authentication instead of chat inputs, and monitors for sensitive files like
.env. - [COMMAND_EXECUTION]: The skill dynamically generates and executes Git and GitHub CLI commands based on user needs and repository state. It mitigates risk by requiring user confirmation for destructive actions like forced pushes, hard resets, or deleting remote branches.
Audit Metadata