jb-git-sync
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from local Git repositories, which could contain malicious instructions designed to influence the agent's behavior during commit grouping or conflict resolution. 1. Ingestion points: Files within
~/jb-homeand other user-configured paths. 2. Boundary markers: None present to isolate file content from instructions. 3. Capability inventory: Executes Git commands (commit,merge,push) and performs file system inspection. 4. Sanitization: No content filtering or validation is performed on the repository data. - [COMMAND_EXECUTION]: The skill uses Git shell commands to manage worktree state, integrate upstream changes, and push to remote repositories.
- [DYNAMIC_EXECUTION]: The skill requires the agent to 'Load and apply jb-committer', which constitutes dynamic invocation of external logic at runtime to handle specific commit grouping tasks.
Audit Metadata