git-workflow-and-versioning
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a set of process guidelines for version control and does not contain any executable code or instructions that bypass safety protocols.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill explicitly instructs agents to perform security hygiene by checking for secrets (passwords, API keys, tokens) in staged changes before committing. It also enforces the use of .gitignore for sensitive files like .env and .pem, which reduces the risk of credential exposure.
- [COMMAND_EXECUTION]: The provided commands are standard Git operations (git worktree, git bisect, git tag) and routine development tasks (npm test, npm run lint, npx tsc). These are used according to their intended purpose within a software development workflow.
- [METADATA_POISONING]: The metadata fields (name, description) accurately reflect the content of the skill, and no deceptive or malicious instructions are present in the headers.
Audit Metadata