Back to skill

Security audit

Git Essentials 1.0.0

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Git command reference skill, with some destructive Git examples that users should run only deliberately.

Installers should treat this as a useful Git reference, but agents should not run destructive examples such as git reset --hard, git clean -fdx, force pushes, stash clearing, or global config changes unless the user explicitly asks and understands the effect.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
70% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · SKILL.md (reported line 136)May include surrounding context.

md
git pull --rebase

# Push changes
git push

# Push new branch
git push -u origin branch-name

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
65% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · SKILL.md (reported line 217)May include surrounding context.

md
git reset --soft HEAD~1

# Undo last commit (discard changes)
git reset --hard HEAD~1

# Revert commit (create new commit)
git revert commit-hash

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
65% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · SKILL.md (reported line 223)May include surrounding context.

md
git reset --soft HEAD~1

# Undo last commit (discard changes)
git reset --hard HEAD~1

# Revert commit (create new commit)
git revert commit-hash

Tool Parameter Abuse

High
Category
Tool Misuse
Confidence
70% confidence
Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · SKILL.md (reported line 337)May include surrounding context.

git clean -fd

Include ignored files

git clean -fdx

text

## Common Workflows

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This markdown file includes irreversible commands such as git reset --hard HEAD~1 and git reset --hard commit-hash, which can permanently discard uncommitted or committed work. Although some nearby comments describe the effect, the skill does not provide a clear safety warning about potential data loss before presenting these commands.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The git clean -f, git clean -fd, and git clean -fdx examples perform file and directory deletion, including ignored files, but the markdown does not include a clear warning that these deletions can be irreversible. Listing a preview command (git clean -n) helps, but it is not an explicit user warning about destructive impact.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.