fork-tax
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes git CLI tools to manage the repository state. It executes commands such as
git statusto identify changes,git addfor staging (with a preference for path-scoped staging),git committo persist changes, andgit tagfor versioning. - [DATA_EXFILTRATION]: The skill performs network operations by executing
git pushto send the repository's local commits and tags to a remote server. This behavior is the stated primary purpose of the skill to facilitate handoffs and state persistence. - [PROMPT_INJECTION]: The skill is subject to an indirect prompt injection surface because it reads and processes the working directory to generate handoff artifacts like
.ημ/Π_STATE.sexpand.ημ/Π_LAST.md. - Ingestion points: Reads the working tree and
git statusoutput. - Boundary markers: None identified in the artifact generation instructions.
- Capability inventory: Perform git commits, tags, and network pushes.
- Sanitization: The skill includes instructions to stop and redact if secrets are suspected, but does not specify automated sanitization for metadata generated from file contents.
Audit Metadata