synthesis-git-hooks
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTIONOBFUSCATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git commands such as
git remote,git diff,git config, andgit rev-parseto determine repository classification and enforce commit policies. - [PERSISTENCE]: The installation process modifies the global Git configuration by setting
core.hooksPath, which ensures that the security hooks are automatically invoked for all Git repositories on the user's system. - [DYNAMIC_EXECUTION]: The skill implements a delegation pattern that executes repository-local scripts found at
.githooks/pre-commitand.githooks/commit-msg, allowing per-repository policy extensions. - [DYNAMIC_EXECUTION]: Bash-based hook scripts execute a Python sidecar and evaluate its output to load configuration dynamically; variable values are safely quoted using
shlex.quotebefore evaluation. - [OBFUSCATION]: The skill includes a compressed and Base85-encoded data file (
session-words-v1.txt.zlib.b85) used for session coordination; this is a static resource and not executable code.
Audit Metadata