git-check
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local Git commands (e.g.,
git diff,git worktree,git fetch) to inspect repository status and perform confirmed operations. These actions are within the intended scope of a development tool. - [SAFE]: Built-in security constraints explicitly forbid high-risk commands such as
force push,hard reset, andgit clean. Furthermore, it implements a manual confirmation step that prevents any Git state changes until the user approves a specific execution plan. - [SAFE]: The skill identifies and protects sensitive information by instructing the agent not to output credentials or tokens, instead only reporting the presence of such files and the associated risks.
- [SAFE]: The skill ingests untrusted repository data like file contents and patches (Ingestion points: Stage 1 Step 2). While it lacks explicit boundary markers or content sanitization for injections, the risk of indirect prompt injection is mitigated by the mandatory human-in-the-loop confirmation phase for all state-changing actions (Capability inventory: Stage 2 commit, merge, and deletion operations).
Audit Metadata