git-push
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements safety logic to protect
mainandmasterbranches from force pushes and skips detached HEAD states, adhering to development best practices. - [COMMAND_EXECUTION]: Local shell execution is restricted to repository discovery and git operations. The scripts utilize
set -euo pipefailand proper variable quoting to ensure execution stability. - [PROMPT_INJECTION]: The skill processes untrusted metadata from local git repository structures.
- Ingestion points:
scripts/git-push.shreads branch names and repository paths usinggit branchandfind. - Boundary markers: No explicit delimiters are used for the repository metadata processed by the script.
- Capability inventory: The skill can execute
git pushacross any discovered repository. - Sanitization: Bash variable quoting is used to prevent argument injection during command execution.
Audit Metadata