Security audit
Security checks for vulnerabilities and agentic risk
This skill reads recent Git commits and helps your agent produce a three-point weekly report, with no hidden or unrelated behavior found.
Run it in the repository you intend to summarize. Commit subjects will enter your agent's context, so consider their confidentiality. Results cover the preceding seven days and filter by your configured Git author name, which may omit commits under other identities.
Retrieving local Git configuration and commit history supports the declared purpose, and there is no evidence of unrelated access or actions. However, the code stops at returning raw commit records, leaving the report-generation portion of the description unimplemented. It also uses a rolling seven-day window rather than explicitly selecting the previous calendar week.
Without declared permissions the skill's intent is opaque and cannot be validated.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
try:
# Get current user
try:
user_name = subprocess.check_output(['git', 'config', 'user.name']).decode('utf-8').strip()
except subprocess.CalledProcessError:
# Fallback if git config is not set or not in a git repo
return "Error: Not a git repository or git user.name not set."
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
'--no-merges'
]
logs = subprocess.check_output(cmd).decode('utf-8')
if not logs:
return "No commits found in the last week."
return logs