git-tag
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill implements robust validation checks, including verifying that the repository is on the default branch and has a clean working tree before proceeding with tagging operations.
- [SAFE]: The skill enforces a human-in-the-loop workflow by requiring explicit confirmation before a tag is created and providing the push command for the user to execute manually, preventing accidental or unauthorized remote changes.
- [SAFE]: Promotes security best practices by using annotated and GPG-signed tags (
git tag -s -a), ensuring the integrity and provenance of version releases. - [SAFE]: All command execution is limited to specific Git subcommands required for the task, minimizing the attack surface.
Audit Metadata