git-flow-branch-creator
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands including
git status,git diff, andgit checkout -b. These are necessary for the skill's primary purpose of analyzing changes and managing branches. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) as it analyzes untrusted data from the local repository to determine its actions.
- Ingestion points: The agent ingests untrusted data by reading file contents and change summaries via
git statusandgit diff(orgit diff --cached). - Boundary markers: The prompt does not utilize delimiters or specific instructions to ignore malicious natural language instructions that might be embedded within the code changes or file contents being analyzed.
- Capability inventory: The agent has the capability to create and switch branches using
git checkout -bbased on its analysis of the changes. - Sanitization: There is no evidence of sanitization or validation of the input data from the git diff before it is used to influence the agent's decision-making and branch naming process.
Audit Metadata