gitreset

SUSPICIOUS: The capability directly rewrites local Git history based on user input without visible safeguards. It can be legitimate as a developer utility in a controlled context, but in a supply-chain tooling scenario it requires explicit safeguards (confirmations, dry-run, repository-scoped checks, and user intent validation) to mitigate accidental or malicious usage.