git-precommit
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard software development lifecycle (SDLC) workflow using industry-standard tools like
ruff,bandit,mypy, andpre-commit. - [SAFE]: Automated security scanning is explicitly integrated into the workflow via
banditandsemgrep, which are standard tools for identifying vulnerabilities and misconfigurations. - [SAFE]: The skill includes specific checks to prevent accidental exposure of sensitive data, such as a dedicated
no private keyshook and an environment configuration check (check_env_config.py) that restricts raw environment variable access in business logic layers. - [SAFE]: Commands utilize
uv, a widely-used Python package manager, to run local scripts and tools in a controlled environment, consistent with modern Python development practices. - [SAFE]: The skill's file operations are strictly scoped to project documentation (README, CHANGELOG, ROADMAP) and configuration files, aligning perfectly with its stated purpose as a workflow orchestrator.
Audit Metadata