yp
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
YitPush.NET global tool (dotnet tool install -g YitPush) from the author's repository to provide its core functionality. - [COMMAND_EXECUTION]: The skill operates by executing various
ypCLI commands on the local system to automate git processes and interact with Azure DevOps services. - [DATA_EXFILTRATION]: The skill includes instructions to read the configuration file
~/.yitpush/config.jsonvia thecatcommand. This file stores sensitive API keys for AI providers. While this is necessary for the tool's configuration, it exposes the path and content of these credentials to the agent's context.
Audit Metadata