git-forensics

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes Git commands (e.g., git log, git show, git rev-list) to extract history and file change patterns. These commands are executed via subprocess.run with capture_output=True and are restricted to the local repository path provided by the user.
  • [COMMAND_EXECUTION]: The git_hotspots.py script executes the lizard complexity analysis library locally on the source code files to calculate cyclomatic complexity and lines of code.
  • [SAFE]: The skill includes instructions to perform git fetch --unshallow to ensure full history is available for analysis, which is a standard operation for Git-based forensic tools.
  • [SAFE]: Data processing is entirely local; findings are output as JSON or Markdown to the console or a local file specified by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 07:05 PM