Security audit
Security checks for vulnerabilities and agentic risk
This Git helper is mostly purpose-aligned, but it teaches an agent to automatically run repository-changing recovery steps, including hard resets labeled as safe.
Review before installing. Use this only in repositories where you are comfortable with an agent editing files and running Git commands. Do not allow automatic recovery or hard reset steps without first creating a backup branch or stash, reviewing the exact commands, and confirming the intended repository path.
@staticmethod
def batch_auto_resolve(cwd=None):
"""批量自动解决冲突"""
result = subprocess.run(
["git", "diff", "--name-only", "--diff-filter=U"],
capture_output=True, text=True, cwd=cwd
)continue
cmd = step.split()
result = subprocess.run(cmd, capture_output=True, text=True, cwd=cwd)
results.append({
"step": step,
"status": "success" if result.returncode == 0 else "failed","safe": True
},
"accidental_reset": {
"description": "误执行了git reset --hard",
"steps": [
"git reflog # 查找reset前的提交",
"git reset --hard <sha> # 恢复到该提交""description": "误执行了git reset --hard",
"steps": [
"git reflog # 查找reset前的提交",
"git reset --hard <sha> # 恢复到该提交"
],
"safe": True
},"description": "合并冲突中无法继续",
"steps": [
"git merge --abort # 取消合并",
"git reset --hard HEAD # 重置到合并前状态"
],
"safe": True
},No suspicious patterns detected.