rightcode-git-commit-push
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
gitcommands via a bundled Python script (git_commit_push.py). The script correctly usessubprocess.runwith argument lists (shell=False), which effectively prevents shell command injection vulnerabilities. - [DATA_EXFILTRATION]: The script includes functionality to push code to remote repositories. This is a core documented feature of the skill and relies on the user's existing local Git configuration and remotes. No unauthorized network operations or credential harvesting patterns were found.
- [SAFE]: The skill performs its stated purpose transparently. It includes safety checks such as dry-run mode, confirmation prompts for destructive actions, and the use of
disable-model-invocation: truein the manifest to limit the execution environment's surface area.
Audit Metadata