git-workflow

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses git and gh (GitHub CLI) to automate repository management tasks. Specifically, it executes git push, git log, gh pr create, and gh pr view to manage the lifecycle of code contributions and documentation.
  • [PROMPT_INJECTION]: The skill processes untrusted external data which could potentially contain malicious instructions, representing an indirect prompt injection surface.
  • Ingestion points: Reads repository metadata and templates from .github/ISSUE_TEMPLATE/, .github/PULL_REQUEST_TEMPLATE.md, and existing commit messages via git log.
  • Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the ingested content.
  • Capability inventory: The skill has the capability to write to the repository and open pull requests using git and gh tools.
  • Sanitization: No explicit sanitization or filtering is performed on the data fetched from commit logs or templates before it is interpolated into PR or issue bodies.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 11:14 PM
Security Audit — agent-trust-hub — git-workflow