The Agent Skills Directory

[COMMAND_EXECUTION]: The skill installs a shell script shim (scripts/git-identity-guard.sh) that intercepts Git commit, commit-tree, and push commands. It resolves the real git binary by scanning the system $PATH while carefully avoiding infinite loops by checking for a marker string in script headers.
[PRIVILEGE_ESCALATION]: The installer script (scripts/install.sh) performs legitimate administrative actions, including creating a configuration directory at ~/.config/git-identity-guard/ and setting executable permissions on the wrapper script using chmod +x.
[PERSISTENCE]: The tool achieves persistent identity enforcement by placing itself in a directory (defaulting to ~/.local/bin) that is intended to precede the real Git binary in the user's $PATH, ensuring the checks are active across shell sessions.
[SAFE]: The skill uses defensive programming techniques, such as reading configuration values with read instead of source to prevent shell injection, and limiting its checks to specific Git subcommands while passing all other traffic directly to the original Git binary.

git-identity-guard