git-guardrails-claude-code
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill sets up a 'PreToolUse' hook which executes a shell script to validate bash commands before they are run. This is a supported feature of the agent platform designed for user-defined safety constraints.
- [SAFE]: The installation process involves standard configuration tasks including copying a bundled shell script, setting execution permissions via 'chmod +x', and appending a configuration entry to the agent's settings file ('.claude/settings.json').
- [DATA_EXPOSURE]: The validation script processes command strings to identify dangerous patterns. It does not perform network operations, access sensitive credentials, or exfiltrate data.
- [PROMPT_INJECTION]: The skill acts as a defense against accidental or malicious execution of destructive commands by providing a layer of validation that ignores embedded instructions within the command string and focuses on specific command patterns.
Audit Metadata