commit-push-pr
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage Git state and verify code quality. These include
git branch,git status,git log,git diff,ruff format,ruff check,pytest,git add, andgit push. - [EXTERNAL_DOWNLOADS]: The skill interacts with remote Git repositories (via
git push) and the GitHub API (viagh pr create). While this involves sending data to an external service, it is the primary and intended function of the skill. - [DATA_EXFILTRATION]: By design, the skill pushes local repository content to a remote server. The instructions include a specific security check to 'Ensure no sensitive files are staged (.env, credentials, etc.)' to mitigate the risk of accidental credential exposure.
Audit Metadata