g2g
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill involves the execution of local CLI tools such as git, gh (GitHub CLI), gt (Graphite CLI), and g2g. Security is maintained through explicit instructions that mandate "preview-first" workflows, dry-runs, and the use of mock implementations (fakes) during testing to prevent accidental modifications or the need for network/credential access during development.
- [EXTERNAL_DOWNLOADS]: The skill references an external Homebrew tap (
shhac/tap/g2g) for the installation of the g2g tool. This resource is directly associated with the skill's author and represents standard distribution for a CLI utility. - [INDIRECT_PROMPT_INJECTION]: The skill instructions involve reading local repository files (e.g., README.md, design-docs) and processing outputs from development tools. While this presents a theoretical surface for indirect injection, the risk is minimal as the sources are typical for software development environments and the skill does not grant elevated privileges or perform unsafe data interpolation.
Audit Metadata