git-guardrails-claude-code
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires modifying the agent's configuration files (.claude/settings.json or ~/.claude/settings.json) to register a persistent hook that runs before tool execution.
- [COMMAND_EXECUTION]: The instructions include a step to grant execution permissions to a local script using chmod +x.
- [SAFE]: The skill includes a defensive script (scripts/block-dangerous-git.sh) designed to enhance environment safety by preventing high-risk Git operations.
- [SAFE]: The skill processes potentially untrusted tool input for validation. 1. Ingestion points: scripts/block-dangerous-git.sh reads JSON data from stdin. 2. Boundary markers: Absent. 3. Capability inventory: The script uses jq and grep to perform pattern matching on commands. 4. Sanitization: Input is parsed using jq to extract the command string, which is then handled as a quoted string during evaluation.
Audit Metadata