conductor-revert
Warn
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs shell command interpolation using user-provided variables such as
{trackId}and{X.Y}within commands likegit log --oneline --grep="{trackId}". If these identifiers are sourced from untrusted user input or malicious files and contain shell metacharacters (e.g.,;,|, or&), an attacker could execute arbitrary code on the host system. - [SAFE]: The skill mandates safe Git practices by using
git revertexclusively rather than destructive history-rewriting commands likegit reset --hardorgit push --force. - [SAFE]: A strict, case-sensitive confirmation step is enforced, requiring the user to type 'YES' exactly before proceeding with the revert execution plan, which helps prevent accidental or automated operations.
- [SAFE]: The instructions include clear failure handling, requiring the agent to halt immediately if merge conflicts occur or if the environment is not in a clean state, ensuring human intervention for complex resolution.
Audit Metadata