jj-case-insensitive-clone-fix
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides utility scripts that safely wrap standard Git and Jujutsu (jj) commands to resolve case-collision issues on case-insensitive filesystems like macOS APFS.
- [COMMAND_EXECUTION]: The bundled shell scripts (
scripts/jj-clone,scripts/diagnose) correctly quote all variables derived from user-supplied URLs and remote repository data (branch names), preventing command injection. - [EXTERNAL_DOWNLOADS]: The skill interacts with remote Git repositories via standard tools (
git,jj). This is the primary purpose of the skill and does not involve downloading or executing arbitrary remote scripts. - [DATA_EXFILTRATION]: No evidence of credential harvesting or sensitive data exfiltration was found. The skill operates exclusively on repository metadata and local directory structures specified by the user.
Audit Metadata