git-integration-operations-cli
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [Command Execution]: Uses CLI tools to perform Git operations, which is standard for infrastructure automation.
- [External Communication]: The skill connects to official platform endpoints and well-known services (Azure DevOps, GitHub) to synchronize workspace content.
- [Sensitive Data Handling]: The skill provides instructions for handling service principal secrets and Personal Access Tokens (PATs), incorporating security practices like restricted file permissions and automatic cleanup of sensitive temporary files.
- [Indirect Prompt Injection Surface]: The skill ingests item definitions and metadata from external Git repositories. (1) Ingestion points: Data enters the agent's context through status checks and update operations from remote repositories. (2) Boundary markers: No specific delimiters are defined for the content pulled from Git. (3) Capability inventory: The skill can execute API calls for workspace connection and modification. (4) Sanitization: The skill does not specify sanitization for the content retrieved from external repositories.
Audit Metadata