gitnexus-cli
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to run code using
npx gitnexus analyzeandpnpm dlx gitnexus@latest analyzeif a local runner is missing. These commands download and execute the latest version of the 'gitnexus' package from the npm registry. - [COMMAND_EXECUTION]: The skill uses a project-local JavaScript runner via
node .gitnexus/run.cjsto execute various subcommands likeanalyze,status,clean,wiki, andlist. - [EXTERNAL_DOWNLOADS]: The skill references a GitHub issue link (
github.com/abhigyanpatwari/GitNexus/issues/1939) for troubleshooting installation crashes. - [CREDENTIALS_UNSAFE]: The
wikicommand includes a--api-keyflag and notes that API keys are saved to a local config file (~/.gitnexus/config.json). While it handles credentials, it follows standard CLI patterns for configuration and does not contain hardcoded secrets.
Audit Metadata