git-hooks-automation
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides comprehensive and standard instructions for automating Git hooks using industry-standard tools like Husky, lint-staged, and the pre-commit framework.
- [EXTERNAL_DOWNLOADS]: Fetches dependencies and hook configurations from well-known GitHub repositories such as psf/black and astral-sh/ruff. These are standard and expected sources for the described functionality.
- [COMMAND_EXECUTION]: Employs standard shell commands and package managers including npm, pip, and npx to install and configure tools. The use of
chmod +xis standard practice for making hook scripts executable. - [INDIRECT_PROMPT_INJECTION]: Defines Git hooks that process staged files and Git diffs. This creates a data ingestion surface; however, the hooks are designed for code quality and security (e.g., secret detection), and the capabilities are restricted to the local development environment.
Audit Metadata