Security checks across malware telemetry and agentic risk
This is a local Git workflow helper with normal repository-tooling risks, but no evidence of hidden install behavior, exfiltration, persistence, or destructive code in the included scripts.
Install only if you want a local Git helper. Review git status and diffs before following any commit, push, rebase, merge, or branch-cleanup instruction, and be cautious using it on untrusted repositories because commit messages, filenames, and branch names are displayed directly.
def run_pr_description(args):
"""Generate PR description"""
# Get branch diff summary
result = subprocess.run(
['git', 'log', f'{args.base}..{args.head}', '--oneline'],
capture_output=True,
text=True,commits = result.stdout.strip().split('\n') if result.stdout else []
# Get changed files
result = subprocess.run(
['git', 'diff', f'{args.base}...{args.head}', '--name-status'],
capture_output=True,
text=True,def run_branch_strategy(args):
"""Show branch strategy suggestions"""
# Get current branch
result = subprocess.run(
['git', 'branch', '--show-current'],
capture_output=True,
text=True,def run_check_branches(args):
"""Check and clean branches"""
# Get all branches
result = subprocess.run(
['git', 'branch', '-a'],
capture_output=True,
text=True,branches = [b.strip().strip('* ') for b in result.stdout.strip().split('\n') if b.strip()]
# Get default branch
result = subprocess.run(
['git', 'symbolic-ref', 'refs/remotes/origin/HEAD'],
capture_output=True,
text=True,66/66 vendors flagged this skill as clean.