git-flow-next

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill installs the git-flow-next tool from the official gittower repository. Gittower is a well-known vendor (the creators of the Tower Git client), and the tool is standard for Gitflow workflows.
  • [SAFE]: Installation is managed via mise using the aqua backend with version pinning (e.g., 1.1.0). This follows security best practices for reproducible and auditable development environments.
  • [SAFE]: The skill includes detailed procedures to migrate away from abandoned or unmaintained versions of git-flow (nvie/gitflow or gitflow-avh), which helps prevent the accidental use of legacy software with potential unpatched vulnerabilities.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard Git commands (git flow init, git config, git rebase) and package management commands (brew uninstall for migration). These operations are transparent, directly related to the skill's purpose, and do not involve privilege escalation or obfuscation.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 09:36 AM
Security Audit — agent-trust-hub — git-flow-next