write-gitignore

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run scoped commands including git and gitignore-sync to audit and synchronize repository ignore rules. These operations are essential to the skill's primary function and are limited by strict tool scoping.
  • [EXTERNAL_DOWNLOADS]: The skill identifies the gitignore-sync CLI as a dependency and provides a suggestion to install the @kirchdev/gitignore-sync package if it is not present. This resource is associated with the skill's vendor.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from repository .gitignore files and configuration data. Ingestion points: Reads patterns and comments from local files. Boundary markers: Explicit instructions in the skill documentation mandate that third-party text be treated as data rather than instructions. Capability inventory: Uses restricted file access and a scoped set of shell utilities. Sanitization: The skill relies on structured JSON output from its CLI dependency for decision logic and implements triage based on carrier evidence to ensure that external data does not override agent behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 11:53 AM