gitkkal-branch
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs local git operations including
git status,git diff, andgit checkout -b. These commands are standard for the skill's purpose of branch management and are triggered by explicit user requests or confirmational steps. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes external data in the form of local source code changes via
git diffto infer branch naming intent. - Ingestion points:
git diffandgit diff --cachedoutputs from the local repository. - Boundary markers: None specified for the interpolated diff content.
- Capability inventory:
git checkout -b <branch_name>(SKILL.md). - Sanitization: The skill enforces a strict naming policy, allowing only lowercase kebab-case ASCII characters (
[a-z0-9-]) and limiting the branch name to 50 characters. This effectively neutralizes potential shell command injection that could be attempted via malicious content in the diff.
Audit Metadata