git-workflow

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill instructions are focused on Git workflow management and do not contain any patterns designed to override agent behavior, bypass safety filters, or extract system prompts.
  • [DATA_EXPOSURE]: No hardcoded credentials, sensitive file path access (such as SSH keys or environment files), or unauthorized network operations were detected. The Git configuration examples use standard placeholders for user information.
  • [REMOTE_CODE_EXECUTION]: The skill does not contain instructions for downloading or executing remote scripts from untrusted sources. All Bash commands provided are standard Git operations intended for repository management.
  • [OBFUSCATION]: No obfuscated content, including Base64 encoding, zero-width characters, homoglyphs, or hidden URL patterns, was found in the analyzed files.
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with Git repository data (such as commit logs and diffs) which could technically contain malicious instructions from external contributors. However, the skill acts as a standard helper for Git workflows and does not incorporate untrusted data into sensitive control paths beyond the inherent nature of the tool.
  • [DYNAMIC_EXECUTION]: There is no evidence of runtime code generation, unsafe deserialization, or dynamic loading of modules from computed paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 09:09 AM