ask
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard Git commands such as
git branch,git status, andgit log, as well as a local Node.js utilityscripts/resolve-feature.jsto gather session context. These operations are scoped to information gathering and do not modify the repository. - [DATA_EXPOSURE]: Includes explicit path security controls that reject traversal attempts (e.g.,
..segments), skip sensitive files like.envorcredentials.*, and implement high-confidence redaction for secrets found in output. - [SAFE]: Enforces a strict read-only policy by explicitly prohibiting mutating Git commands like
commit,push,reset,stash, andrestore. It further limits tool access by omitting Edit and Write capabilities from theallowed-toolsmanifest.
Audit Metadata