Repo Cleaner

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only Git branch cleanup skill that clearly discloses branch deletion behavior and requires review before deletion.

Install only if you want help pruning Git branches. Review the proposed branch list carefully before approving deletion, prefer safe deletion over force deletion, and be especially cautious with remote branch deletion in shared repositories.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
84% confidence
Finding
The skill's trigger phrases and description are broad enough to match common Git maintenance requests without tightly constraining scope, which increases the chance the agent will invoke destructive branch-deletion guidance in situations where the user did not explicitly request deletion. Because the skill concerns source-control cleanup, accidental activation could lead to branch removal recommendations or commands being surfaced in a routine Git-help context.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal