Security audit
GitAssist AI-Powered Git Workflow Helper
Security checks across malware telemetry and agentic risk
Overview
GitAssist is a local git helper that reads repository diffs and commit history to generate workflow text, with no evidence of network exfiltration, destructive actions, or persistence.
Before installing, confirm how the CLI is wired in your environment and use it only in repositories where staged diffs and commit history are appropriate to expose to your local or configured model context.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
