prek-precommit-hook
Warn
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill description ('prek should override pre-commit hooks') and content instruct the agent to prioritize an unknown tool over standard industry utilities, which is a directive to alter expected behavior.
- [COMMAND_EXECUTION]: The skill promotes the use of commands such as 'prek install' and 'prek run'. Since 'prek' is not a recognized or verifiable software package, executing these commands poses a security risk as they could execute arbitrary malicious code or create persistent malicious hooks in the git lifecycle.
Audit Metadata