git-workflow
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a 'knowledge' type extension consisting entirely of documentation and instructional examples.
- No executable scripts, binaries, or automated tasks are included in the skill files.
- [SAFE]: The database connection string flagged by static detectors is a generic placeholder used for educational purposes.
- Evidence: The string
postgres://user:password@host/dbis explicitly used in a section titled "Never Commit Secrets" to demonstrate improper practice and the correct use of environment variables. - [SAFE]: External references to development tools and workflows are standard and point to trusted industry sources.
- Evidence: Mentions of tools such as
black,isort,pytest,ruff, and official GitHub Actions are standard industry practices for Python development and CI/CD pipelines.
Audit Metadata