gitnexus-cli
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill runs a project-local script using
node .gitnexus/run.cjs. It also suggests commands for global installation andpnpm dlxwhich includes build permissions for native modules. - [EXTERNAL_DOWNLOADS]: The instructions guide the agent to fetch the
gitnexuspackage from the NPM registry vianpxorpnpmto ensure the runner is available. - [CREDENTIALS_UNSAFE]: The skill mentions storing LLM API keys in
~/.gitnexus/config.jsonand uses theOPENAI_API_KEYenvironment variable for faster processing. - [PROMPT_INJECTION]: The analysis process creates a surface for indirect prompt injection by parsing repository source files into a knowledge graph.
- Ingestion points: Source files in the project root are read during
analyze(SKILL.md). - Boundary markers: None are provided to distinguish between code and instructions.
- Capability inventory: The tool writes to
.gitnexus/and creates context files likeCLAUDE.md, which are subsequently read by the agent. - Sanitization: No sanitization process for ingested source code content is mentioned.
Audit Metadata