setup-git-lite
Warn
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPERSISTENCEPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Node.js script located at
${CLAUDE_PLUGIN_ROOT}/scripts/setup-git-lite.js. The source code for this script is not visible, which prevents verification of the operations it performs on the system. - [PERSISTENCE]: The
installsubcommand is designed to append a marker block to the user's shell profile (e.g.,.bashrc,.zshrc). This is a persistence mechanism that ensures environment variables are set in every future shell session. - [PRIVILEGE_ESCALATION]: The skill modifies global configuration files located at
~/.claude/settings.json. While these are within the user's home directory, the skill explicitly attempts to override the default behavior and safety instructions of the host application (Claude Code) by disabling built-in git instructions. - [COMMAND_EXECUTION]: The skill uses an invocation guard to prevent AI-initiated execution of destructive subcommands, requiring explicit user tags (
<command-name>) and a 'yes' confirmation. However, the safe subcommands (status,dismiss-banner, etc.) execute immediately without these protections.
Audit Metadata