gitnexus-cli

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs the agent to run code using npx gitnexus analyze and pnpm dlx gitnexus@latest analyze if a local runner is missing. These commands download and execute the latest version of the 'gitnexus' package from the npm registry.
  • [COMMAND_EXECUTION]: The skill uses a project-local JavaScript runner via node .gitnexus/run.cjs to execute various subcommands like analyze, status, clean, wiki, and list.
  • [EXTERNAL_DOWNLOADS]: The skill references a GitHub issue link (github.com/abhigyanpatwari/GitNexus/issues/1939) for troubleshooting installation crashes.
  • [CREDENTIALS_UNSAFE]: The wiki command includes a --api-key flag and notes that API keys are saved to a local config file (~/.gitnexus/config.json). While it handles credentials, it follows standard CLI patterns for configuration and does not contain hardcoded secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 06:25 AM