version-control
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [COMMAND_EXECUTION] (LOW): The skill contains scripts that interact with the local Git environment to provide repository status and maintenance.
- Evidence:
scripts/git_checker.pyexecutesgit --versionandgit branch --show-currentviasubprocess.getoutput. - Evidence:
scripts/git_cleanup.shuses standard Git commands likegit branch --mergedandgit remote prune. - Analysis: The commands are hardcoded strings that do not interpolate untrusted input, posing no risk of command injection. They are used appropriately for the skill's documented purpose.
- [DATA_EXFILTRATION] (SAFE): No network operations, API calls, or attempts to access sensitive files (like SSH keys or AWS credentials) were found. The skill operates entirely within the local filesystem context.
- [PROMPT_INJECTION] (SAFE): All content in
SKILL.mdand the reference guides consists of legitimate technical documentation for version control workflows and does not contain instructions intended to bypass AI safety filters or override agent behavior.
Audit Metadata