skills/timschoch/skilly/git-shortcuts/Gen Agent Trust Hub

git-shortcuts

Pass

Audited by Gen Agent Trust Hub on Aug 31, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard git and GitHub CLI (gh) commands to automate developer workflows. These include git push, gh pr create, gh pr merge, and git pull --ff-only. All execution is explicitly triggered by the user via -- prefixed shorthands (e.g., --cp, --pr).
  • [COMMAND_EXECUTION]: The skill executes repository-local scripts if present, specifically scripts/teardown.sh and scripts/worktree-remove.sh when performing worktree cleanup via --close. It correctly validates these scripts exist before execution and provides a template for the user to set them up securely if missing.
  • [COMMAND_EXECUTION]: The skill performs environment checks using git ls-remote and git symbolic-ref to determine branch structures (e.g., detecting if a staging branch exists) to ensure the correct workflow is applied to the specific repository.
  • [DATA_EXPOSURE]: The skill accesses the .env file to check for or store SLACK_USER_ID. This is a standard practice for personalizing notifications and the skill explicitly asks for user permission before writing to the file.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 31, 2026, 11:06 PM
Security Audit — agent-trust-hub — git-shortcuts