git-workflow
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions are focused on Git workflow management and do not contain any patterns designed to override agent behavior, bypass safety filters, or extract system prompts.
- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file path access (such as SSH keys or environment files), or unauthorized network operations were detected. The Git configuration examples use standard placeholders for user information.
- [REMOTE_CODE_EXECUTION]: The skill does not contain instructions for downloading or executing remote scripts from untrusted sources. All Bash commands provided are standard Git operations intended for repository management.
- [OBFUSCATION]: No obfuscated content, including Base64 encoding, zero-width characters, homoglyphs, or hidden URL patterns, was found in the analyzed files.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with Git repository data (such as commit logs and diffs) which could technically contain malicious instructions from external contributors. However, the skill acts as a standard helper for Git workflows and does not incorporate untrusted data into sensitive control paths beyond the inherent nature of the tool.
- [DYNAMIC_EXECUTION]: There is no evidence of runtime code generation, unsafe deserialization, or dynamic loading of modules from computed paths.
Audit Metadata