Security audit
Security checks for vulnerabilities and agentic risk
This skill gives safety-oriented guidance for advanced Git tasks and its risky commands are disclosed, scoped to Git recovery/history workflows, and paired with inspection or rollback advice.
Install this only if you want an agent to help with real Git history and recovery tasks. Review commands before execution, especially `reset --hard`, rebases, and force-pushes, because they can discard local state or rewrite shared history if used on the wrong commit or branch.
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
If history was rewritten and remote update is intended, prefer:
git push --force-with-lease
Prefer --force-with-lease over --force unless the user explicitly understands the stronger overwrite behavior.
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
git reflog --date=local --decorate -n 20
git reset --hard HEAD@{1}
Use the actual reflog entry that points at the lost state. Inspect first before resetting again.
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
git reflog --date=local --decorate -n 20
git reset --hard HEAD@{1}
Use the actual reflog entry that points at the lost state. Inspect first before resetting again.
No suspicious patterns detected.