vp-gitignore-builder
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill retrieves .gitignore templates from
https://raw.githubusercontent.com/github/gitignore, which is an official and trusted repository for these templates. This network activity is consistent with the skill's stated purpose. - [SAFE]: The included bash script
merge-gitignore.shhandles template merging and line-ending normalization. It does not execute the downloaded content, use elevated privileges (sudo), or perform any obfuscated operations. - [SAFE]: The skill incorporates human-in-the-loop checkpoints, requiring user confirmation for template selection, line-ending choices, and final file writes with a diff preview.
- [SAFE]: While the skill ingests local file names and git status information to recommend templates (Category 8 surface), this data is used solely to construct requests for static text templates. It does not present a path for indirect command injection or unauthorized data exposure.
Audit Metadata