Git Workflow Helper

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:42 PM UTC
• Version:
  1.0.0

Overview

This is a simple Git help skill that can suggest repository-changing commands, but the behavior matches its stated purpose.

Review suggested Git commands before running them in a real repository. Be especially careful with reset, merge, rebase, and conflict-resolution steps, and confirm whether commits were already pushed before changing history.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The skill description advertises very broad trigger terms such as 'Git', 'commit', 'merge', and 'branch', which are common in ordinary developer conversations. This can cause unintended invocation in unrelated contexts, increasing the chance the agent provides intrusive or inappropriate Git guidance when the user did not explicitly request the skill.

VirusTotal

66/66 vendors flagged this skill as clean.