cm-identity-guard
Ensures project identity verification before git pushes and deployments, preventing wrong-account errors and secret leaks.
Install this skill
Security score
The cm-identity-guard skill was audited on Jun 7, 2026 and we found 19 security issues across 3 threat categories, including 5 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 243 | ssh-keygen -t ed25519 -C "[email protected]" -f ~/.ssh/id_my_work_org |
Access to hidden dotfiles in home directory
| 244 | ssh-keygen -t ed25519 -C "personal@..." -f ~/.ssh/id_personal |
Access to hidden dotfiles in home directory
| 246 | # ~/.ssh/config — route by host alias |
Access to hidden dotfiles in home directory
| 250 | IdentityFile ~/.ssh/id_my_work_org |
Access to hidden dotfiles in home directory
| 255 | IdentityFile ~/.ssh/id_personal |
Access to hidden dotfiles in home directory
| 281 | > Use `includeIf` in `~/.gitconfig` to auto-apply work identity for repos in specific directories: |
Access to hidden dotfiles in home directory
| 284 | > path = ~/.gitconfig-work |
Access to hidden dotfiles in home directory
| 286 | > `~/.gitconfig-work`: |
Access to SSH directory
| 243 | ssh-keygen -t ed25519 -C "[email protected]" -f ~/.ssh/id_my_work_org |
Access to SSH directory
| 244 | ssh-keygen -t ed25519 -C "personal@..." -f ~/.ssh/id_personal |
Access to SSH directory
| 246 | # ~/.ssh/config — route by host alias |
Access to SSH directory
| 250 | IdentityFile ~/.ssh/id_my_work_org |
Access to SSH directory
| 255 | IdentityFile ~/.ssh/id_personal |
Prompting for password/secret input
| 382 | wrangler secret put SUPABASE_URL # Enter correct URL |
Prompting for password/secret input
| 383 | wrangler secret put SUPABASE_SERVICE_KEY # Enter correct key |
Prompting for password/secret input
| 384 | wrangler secret put SUPABASE_ANON_KEY # Enter correct key |
External URL reference
| 92 | "stagingUrl": "https://my-app-staging.pages.dev", |
External URL reference
| 93 | "productionUrl": "https://myapp.workdomain.com", |
External URL reference
| 185 | # The URL pattern reveals the project: https://<PROJECT_ID>.supabase.co |