git-repo-audit
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of localized Bash scripts (
hotfiles.sh,ownership.sh,secret-scan.sh) that use standard Git commands to analyze repository history. No network operations, external downloads, or suspicious execution patterns were found. - [SAFE]: The secret scanning functionality uses regex patterns to identify sensitive data within the local repository's history and includes a redaction mechanism (
...REDACTED) to prevent accidental exposure of sensitive findings in the output. - [SAFE]: Input handling for repository paths and parameters includes appropriate validation and quoting (e.g., using
"$REPO_PATH"and checking for the existence of.git), which prevents common command injection vectors during local execution.
Audit Metadata