git-guardrails
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a bash script (
scripts/block-dangerous-git.sh) designed to run as a pre-tool-use hook. It reads command payloads from standard input and uses shell utilities likejqandgrepto identify blocked patterns. - [SAFE]: The script's logic is straightforward and serves a defensive purpose. It does not perform network operations, access sensitive files, or attempt to obfuscate its behavior.
- [SAFE]: The instructions for modifying agent settings (e.g.,
.claude/settings.json) are standard configuration steps required to implement the hook mechanism and do not introduce hidden persistence or unauthorized access.
Audit Metadata