write-gitignore
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run scoped commands including
gitandgitignore-syncto audit and synchronize repository ignore rules. These operations are essential to the skill's primary function and are limited by strict tool scoping. - [EXTERNAL_DOWNLOADS]: The skill identifies the
gitignore-syncCLI as a dependency and provides a suggestion to install the@kirchdev/gitignore-syncpackage if it is not present. This resource is associated with the skill's vendor. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from repository
.gitignorefiles and configuration data. Ingestion points: Reads patterns and comments from local files. Boundary markers: Explicit instructions in the skill documentation mandate that third-party text be treated as data rather than instructions. Capability inventory: Uses restricted file access and a scoped set of shell utilities. Sanitization: The skill relies on structured JSON output from its CLI dependency for decision logic and implements triage based on carrier evidence to ensure that external data does not override agent behavior.
Audit Metadata