git-precommit

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a standard software development lifecycle (SDLC) workflow using industry-standard tools like ruff, bandit, mypy, and pre-commit.
  • [SAFE]: Automated security scanning is explicitly integrated into the workflow via bandit and semgrep, which are standard tools for identifying vulnerabilities and misconfigurations.
  • [SAFE]: The skill includes specific checks to prevent accidental exposure of sensitive data, such as a dedicated no private keys hook and an environment configuration check (check_env_config.py) that restricts raw environment variable access in business logic layers.
  • [SAFE]: Commands utilize uv, a widely-used Python package manager, to run local scripts and tools in a controlled environment, consistent with modern Python development practices.
  • [SAFE]: The skill's file operations are strictly scoped to project documentation (README, CHANGELOG, ROADMAP) and configuration files, aligning perfectly with its stated purpose as a workflow orchestrator.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 02:34 AM
Security Audit — agent-trust-hub — git-precommit