Agent Economy ReportAgent Economy ReportCAUTION version 1.0.0 · audited 2026-09-09
This package is a plain documentation cheat sheet for Git. It contains a single markdown file listing common Git commands (setup, commit, branch, merge, remote, log, stash, rebase, tags, cleanup) with short explanations, plus a metadata file and a publisher card. There are no scripts, no installers, no network calls made by the skill itself, and no reading or writing of files or credentials. The only external URLs are official Git documentation links and generic github.com placeholders in example commands. The main caution is inherent to Git itself: some documented commands (git reset --hard, git clean -fdx, git push --force-with-lease, branch/tag deletion, changing remote URLs) can destroy local work or affect shared repositories if an agent runs them without confirmation.
| Declared purpose | Provide essential Git commands and workflows for version control, branching, and collaboration (a reference document). |
| Observed behavior | Static markdown reference only. It declares a dependency on the git binary and shows bash examples, but the skill itself executes nothing, contacts no server, sets no environment variables, and creates no files. All linked domains are official Git docs or example placeholders. |
| Verdict, rules only | SAFE |
| Verdict, AI | CAUTION |
| Final verdict | CAUTION (never better than either pass) |
| capability | vs purpose | detail |
|---|---|---|
| shell | needed | SKILL.md documents bash/git commands that an agent may execute on the user's behalf, including destructive ones (git reset --hard, git clean -fdx, git push --force-with-lease). No command is auto-run by the package itself. |
| network | needed | Only in the sense that documented git clone/fetch/push examples reach github.com placeholders and doc links point to git-scm.com and marklodato.github.io. The skill makes no network requests on its own. |
| severity | finding |
|---|---|
| low | Documents commands that permanently discard local work An agent following this reference may run destructive history/working-tree resets. This is normal Git usage but irreversible for uncommitted changes; a human confirmation step is advisable. SKILL.md:217 git reset --hard HEAD~1 |
| low | Documents deletion of untracked and ignored files git clean -fdx removes untracked and gitignored files, which commonly includes local .env files holding credentials, build artifacts, and secrets. Risky if executed automatically by an agent. SKILL.md:337 git clean -fdx |
| low | Documents force pushing to remotes Force pushing can overwrite collaborators' history on shared branches. The document does advise against force-pushing shared branches (line 396), but an agent could still act on the example. SKILL.md:142 git push --force-with-lease |
| info | Documents changing a repository's remote URL Changing a remote could redirect pushes to a different destination. Here it is a generic placeholder example with no attacker-controlled host; no specific third-party remote is injected. SKILL.md:118 git remote set-url origin https://github.com/user/new-repo.git |
| info | Publisher metadata only The only non-documentation domain is the ClawHub registry page for the publisher; it is a link in the card, not a runtime endpoint. skill-card.md:7 [arnarsson](https://clawhub.ai/user/arnarsson) <br> |
0 AI finding(s) were dropped because their file, line or quote did not match the package.
| domain | service rating | where |
|---|---|---|
| clawhub.ai | not in the service index | skill-card.md:7 |
| git-scm.com | not in the service index | SKILL.md:4 |
| github.com | not in the service index | SKILL.md:23 |
| marklodato.github.io | not in the service index | SKILL.md:431 |
| Binaries invoked | bash, git |
| Environment variables read | none |
| Hard-coded wallets | none |
| Pipes a download to a shell | 0 |
| eval / exec / subprocess | 0 |
| base64 blobs | 0 |
| File writes | 0 |
| Persistence | 0 |
| file | lines | sha256 |
|---|---|---|
SKILL.md | 431 | 91afbc572326eb63… |
_meta.json | 6 | aa1d02929a5d7a68… |
skill-card.md | 41 | 3b7964e58aa1a9c3… |
For agents
JSON: https://agenteconomy.report/k/git-essentials.audit.json · badge: https://agenteconomy.report/k/git-essentials.audited.svg ·
skill rating: /k/git-essentials · commission an audit of any skill: US$ 29 per version.
The complete published package of this exact version was downloaded from the registry and read statically; nothing was executed. A deterministic pass extracts network destinations, binaries, environment variables, writes, install commands, obfuscation markers, subprocesses and wallets, each with file and line. An AI then reads the whole package with those facts and writes the summary, the capabilities and the findings under a strict schema; every finding it produces must cite a file, a line and the exact text, or it is dropped. The final verdict is the worst of the two passes. The audit does not change the skill's trust tier (policy); the author may respond through the dispute channel and the response is published here. Commissioned by: the Agent Economy Report (free program: the 150 most downloaded skills, September 2026).