git-rebase-sync
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various git and gh shell commands to manage repository state. This includes a bash script snippet in the 'Detect stacked branches' step that uses a loop and git-merge-base to identify ancestor branches.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection in Step 7, where the agent is instructed to read conflicted file contents to resolve rebasing issues. Malicious instructions embedded in these files could attempt to subvert the agent's logic. * Ingestion points: Conflicted file contents (Step 7). * Boundary markers: No explicit markers or delimiters are used for the data read from files. * Capability inventory: The skill has the ability to execute git commands including rebase, tag, and push (SKILL.md). * Sanitization: No sanitization or validation of external file content is specified before processing.
Audit Metadata