Git Guardrails Claude Code Skill Security Audit

The skill claims to block every `git push` variant, but the script only searches the full command for a short list of fixed regex fragments. Forms that insert `-C repo` between `git` and `push`, or vary whitespace or option order, may not match and can exit 0. It also relies on `jq` to extract the command without checking whether parsing succeeded; missing `jq`, invalid JSON, or a missing field may produce an empty value that reaches `exit 0`. This can give users more confidence than the implementation warrants. Users can ask for structured command parsing, fail-closed error handling, and tests of alternate command forms.

The hook applies to every Bash tool call, while the script merely searches the entire command text for listed regex fragments and does not determine which program would actually run. A harmless command that prints, searches for, or writes text such as `git push` or `reset --hard` may therefore be rejected with exit code 2. This is primarily an availability and decision-interference risk; it does not itself execute the dangerous Git operation. Users can ask the author to block only after parsing an actual Git invocation or to narrow the hook's scope.