git-guardrails-claude-code
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a bash script (
scripts/block-dangerous-git.sh) designed to intercept and validate shell commands. The instructions direct the agent to install this script locally and make it executable usingchmod +x. - [PERSISTENCE]: The skill instructs the agent to modify the platform's configuration files (
.claude/settings.jsonor~/.claude/settings.json) to register the hook script. This ensures the security check is persistently applied to all future tool invocations within the specified scope. - [DATA_EXPOSURE]: The analysis confirms that the interceptor script only outputs a block message to
stderrand does not perform any network operations or unauthorized data access.
Audit Metadata