concurrent-branches
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structured guidance and shell-based tooling for identifying and resolving git merge conflicts in common project configuration and manifest files.
- [COMMAND_EXECUTION]: Utilizes standard CLI tools such as git, jq, grep, and make for repository analysis and artifact generation. These operations are restricted to the local workspace and align with the skill's purpose.
- [EXTERNAL_DOWNLOADS]: Includes a reference to a source repository on GitHub (github.com/wdm0006/python-skills). This is a static documentation link and does not trigger remote code execution.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local files (manifests and source code) using tools like jq and grep. Ingestion points: manifest.json, package.json, pyproject.toml, and test files (SKILL.md). Boundary markers: Absent. Capability inventory: Shell execution of git, jq, grep, and make (SKILL.md). Sanitization: Absent. Despite the ingestion surface, the focus on structural validation and the use of standard tooling makes this a low-risk, standard development activity.
Audit Metadata