gitnexus-cli
Warn
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx gitnexusto fetch and execute code from the npm registry, creating a dependency on an external third-party package that is not maintained by a recognized trusted organization. - [COMMAND_EXECUTION]: Several CLI commands are provided for repository management, including
analyze,status, andclean, which perform local file system operations. - [DATA_EXFILTRATION]: The
wikicommand provides a--gistflag that publishes repository documentation to a public GitHub Gist, potentially exposing internal code logic, project metadata, or sensitive summaries. - [CREDENTIALS_UNSAFE]: The skill manages LLM API keys by storing them locally in
~/.gitnexus/config.jsonand suggests the use of theOPENAI_API_KEYenvironment variable, which are sensitive credentials.
Audit Metadata