gitkkal-branch

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs local git operations including git status, git diff, and git checkout -b. These commands are standard for the skill's purpose of branch management and are triggered by explicit user requests or confirmational steps.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes external data in the form of local source code changes via git diff to infer branch naming intent.
  • Ingestion points: git diff and git diff --cached outputs from the local repository.
  • Boundary markers: None specified for the interpolated diff content.
  • Capability inventory: git checkout -b <branch_name> (SKILL.md).
  • Sanitization: The skill enforces a strict naming policy, allowing only lowercase kebab-case ASCII characters ([a-z0-9-]) and limiting the branch name to 50 characters. This effectively neutralizes potential shell command injection that could be attempted via malicious content in the diff.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 11:52 AM