git-workflow-skill
gitflow — end-to-end GitHub delivery skill for AI agents: feature branch → atomic commits → validation → pull request → merge → cleanup → GitHub Projects tasks. Team-safe (respects branch protection), stack-agnostic. Auto-installs into .agents/skills or .
This report shows the evidence for git-workflow-skill@1.0.0, the only known version.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a concrete, install-time, unconsented mutation of foreign/broad AI-agent control surfaces. No separate exfiltration or remote payload behavior was found, but the lifecycle control-surface write meets the block boundary.
Decision evidence
public snapshot- npm postinstall executes install.mjs.
- Installer derives the consuming project root and writes both .agents and .claude skill directories.
- It recursively overwrites the gitflow skill with force.
- No credential harvesting, exfiltration, or remote payload download found.
- Bundled skill includes branch-protection and destructive-action safeguards.
Source & flagged code
7 flagged · loading sourcePackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgFindings
Affected versions and remediation
This report applies to git-workflow-skill@1.0.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing git-workflow-skill@1.0.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.