x-git
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions and examples for executing repository management commands via the x-cmd CLI tools, such as
x gh,x gl,x cb, andx fjo. These include operations for cloning repositories, managing pull requests, and configuring Git hooks, which are standard functionalities for developer tools. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface as it interacts with external content from code hosting platforms (e.g., repository metadata, issue descriptions, and pull request content).
- Ingestion points: External data enters the agent's context through tools like
x gh issue,x gh pr, andx gl mrin SKILL.md. - Boundary markers: None explicitly defined in the skill documentation.
- Capability inventory: The skill allows for repository cloning, pull request management, and Git hook modification (
x githook apply). - Sanitization: Not explicitly defined within the skill's instructional text; however, no evidence of unsafe interpolation of external content into executable logic is present.
Audit Metadata