Security audit
Working Tree Governor
Security checks for vulnerabilities and agentic risk
Overview
This is an instruction-only git workflow skill that helps agents selectively stage and commit changes while avoiding logs, caches, and runtime noise.
Install this if you want an agent to help manage noisy dirty git trees and commit safely. Keep the approval gate for ambiguous or large staged sets, and review the path-bucketing rules for your repositories so important local files are not accidentally treated as noise.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.