git-leak-recovery
Pass
Audited by Gen Agent Trust Hub on Feb 15, 2026
Risk Level: LOWCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (LOW): The skill provides various Git commands for repository management and garbage collection. Evidence: Commands such as
git gc --prune=now --aggressiveandgit reflog expire --expire=now --allin SKILL.md are destructive by nature and could lead to data loss if executed outside the intended context, though they are used correctly for secret cleanup here. - [DATA_EXPOSURE] (INFO): The skill is designed to discover and extract sensitive data. Evidence: The workflow specifically targets the identification and recovery of 'secrets, credentials, and API keys' from Git history, reflogs, and unreachable objects in SKILL.md. This is an administrative capability that requires careful handling of the resulting output.
Audit Metadata