git-dotfiles-helper
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements defensive instructions, specifically warning the agent to never commit sensitive data like API keys, tokens, or private SSH keys.
- [COMMAND_EXECUTION]: The skill uses standard Git commands (git status, git diff, git add, git commit) to perform its intended functions.
- [PROMPT_INJECTION]: The skill has an Indirect Prompt Injection surface. Ingestion point: git diff output in SKILL.md. Boundary markers: None. Capability inventory: git add and git commit operations. Sanitization: Explicit instructions to scan for secrets and warn the user before proceeding.
Audit Metadata