gitleaks-scanning
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing
gitleakscommands to scan git history, local directories, and stdin streams. - [EXTERNAL_DOWNLOADS]: The skill references downloads from trusted and well-known sources, including the official Gitleaks GitHub repository, Docker Hub, and Homebrew for tool installation and updates.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external, potentially untrusted data such as git commit history and source code files, creating an inherent attack surface for indirect prompt injection. However, this is consistent with its primary purpose as a security scanner.
- [PRIVILEGE_ESCALATION]: Documentation and evaluation examples include the use of
sudofor installing security tooling within a CI/CD environment. - [DATA_EXPOSURE]: The evaluation scenarios contain redacted or fabricated secret patterns (e.g., Stripe, AWS, and Slack tokens) used to test the scanning and remediation capabilities of the tool.
Audit Metadata