atomic-commit

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Functionality is limited to standard repository management using git, jq, and gh CLI tools.
  • [SAFE]: Includes specific guardrails to detect and prevent the accidental commitment of secrets (e.g., .env files, API tokens).
  • [SAFE]: Enforces security best practices by refusing to bypass commit hooks (--no-verify) or GPG signing requirements.
  • [SAFE]: Configuration resolution is performed locally using a provided script, and caching is restricted to the local git environment, minimizing external risks.
  • [SAFE]: External references are limited to trusted vendor resources from the author's official GitHub repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 11:27 AM
Security Audit — agent-trust-hub — atomic-commit