Security audit

Git Helper Tool Free

Security checks across malware telemetry and agentic risk

Overview

This Git helper is mostly purpose-aligned, but it gives unsafe credential-storage advice and has overly broad activation language that users should review before installing.

Install only if you are comfortable with an exec-enabled Git helper. Avoid the `credential.helper store` recommendation unless you understand the credential exposure risk; prefer an OS-backed credential manager or SSH keys. Review commands before execution, especially global Git config changes, push/merge operations, and reset examples.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (4)

Context-Inappropriate Capability

Medium

Confidence: 95% confidence
Finding: The skill recommends `git config --global credential.helper store`, which persists Git credentials on disk in plaintext or trivially recoverable form on many systems. In a Git-assistant context this is dangerous because users may follow the advice directly, exposing repository credentials to local compromise, malware, or other users on the same machine.

Intent-Code Divergence

Medium

Confidence: 80% confidence
Finding: The documentation says the skill is not suitable for operations/deployment management, but the trigger conditions say it should be used for development/deployment needs. This inconsistency can cause the agent to activate in broader contexts than intended, increasing the chance it is used for sensitive workflows where its guidance is incomplete or unsafe.

Vague Triggers

Medium

Confidence: 82% confidence
Finding: The trigger condition is overly broad, including general code generation, programming assistance, debugging, testing, and deployment scenarios far beyond a Git helper's stated purpose. Broad activation increases the risk of the skill being invoked in unrelated contexts and issuing shell-oriented guidance that is inappropriate, unsafe, or misleading for the user's actual task.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The skill provides credential storage guidance without warning that `credential.helper store` can save secrets insecurely. Omitting the warning materially increases the likelihood that users will adopt unsafe authentication practices, leading to credential theft and unauthorized repository access.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.