git-cleanup

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard Git commands (git branch, git log, git worktree, git fetch) to analyze and manage the local repository. These operations are restricted to the local environment and are used for the skill's primary stated purpose.
  • [SAFE]: The skill demonstrates security best practices by requiring user confirmation at two distinct 'gates' before proceeding with deletions. It also includes specific instructions to programmatically protect key branches (e.g., main, master, develop) and explicitly warns the user about 'dirty' worktrees containing uncommitted changes.
  • [SAFE]: To mitigate potential shell injection risks from untrusted input (such as branch names containing special characters), the skill mandates the use of proper shell quoting (e.g., "$branch") for all command interpolations.
  • [SAFE]: External references are limited to reputable sources for licensing (Creative Commons) and origin attribution (Trail of Bits public repository), posing no security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 12:07 PM
Security Audit — agent-trust-hub — git-cleanup