git-workflow

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a 'knowledge' type extension consisting entirely of documentation and instructional examples.
  • No executable scripts, binaries, or automated tasks are included in the skill files.
  • [SAFE]: The database connection string flagged by static detectors is a generic placeholder used for educational purposes.
  • Evidence: The string postgres://user:password@host/db is explicitly used in a section titled "Never Commit Secrets" to demonstrate improper practice and the correct use of environment variables.
  • [SAFE]: External references to development tools and workflows are standard and point to trusted industry sources.
  • Evidence: Mentions of tools such as black, isort, pytest, ruff, and official GitHub Actions are standard industry practices for Python development and CI/CD pipelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 12:11 PM