finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
gitand the GitHub CLI (gh) to automate branch lifecycle tasks such as pushing to remotes and creating Pull Requests as seen inSKILL.md.- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by interpolating external data into its reports and commands. - Ingestion points: Data is ingested from plan files (e.g.,
plan_name), external review findings, and verification ledgers. - Boundary markers: The
morning-report-template.mduses{{double-brace}}placeholders for interpolation, but there are no explicit boundary markers or instructions to treat ingested data as non-executable text in the generated PR body. - Capability inventory: The skill can execute shell commands, write to the filesystem, and push to remote repositories.
- Sanitization: No sanitization or escaping of external content is specified before it is interpolated into shell commands or the morning report.
Audit Metadata