Prompt Git

Security checks across static analysis, malware telemetry, and agentic risk

Overview

Prompt Git appears to be a local prompt versioning tool whose file storage, search, import, and export behavior matches its stated purpose, but users should treat stored or shared prompts as sensitive.

This skill looks appropriate for local prompt version control. Before installing, remember that prompts saved into ~/.promptgit may include sensitive instructions and can be exported or shared; review imported prompt files carefully and do not store secrets unless you intend them to persist locally.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Sensitive prompts or imported prompt instructions could persist locally and be reused or exported later.

Why it was flagged

The tool intentionally stores prompt libraries, including system prompts, in a persistent local repository. This is purpose-aligned, but the stored content may be sensitive or later reused as trusted prompt context.

Skill content
PromptGit gives you version control for AI prompts — system prompts, task prompts, templates, snippets... Storage Structure: ~/.promptgit/
Recommendation

Keep the repository private, review imported prompts before reuse, and avoid storing secrets, credentials, or confidential system instructions unless local persistence is intended.

What this means

Users have less external provenance information and should know the skill relies on local Python execution.

Why it was flagged

The package provenance is limited and the metadata does not declare Python even though the README lists Python 3.7+ as a requirement. The artifacts otherwise show local, zero-dependency scripts, so this is a disclosure/provenance note rather than a material concern.

Skill content
Source: unknown; Homepage: none; Required binaries (all must exist): none
Recommendation

Review the included scripts before use and ensure Python 3.7+ is available; prefer installing from a trusted source when possible.