seamless-rebase
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on standard Git CLI commands (such as git rebase, git status, and git push) to perform branch management and synchronization. These operations are necessary for the skill's intended purpose and are restricted to the repository environment.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it reads and processes file contents containing conflict markers, which could be influenced by an external contributor. Ingestion points: File contents and conflict markers are ingested via git show and file inspection in SKILL.md. Boundary markers: There are no specific delimiters used for untrusted file content, but the skill instructs the agent to treat resolution as a semantic task and consult the user for clarification. Capability inventory: The agent has the ability to write to the local filesystem and perform network operations via Git's remote commands. Sanitization: The workflow requires human-in-the-loop verification for any ambiguous or semantic conflicts, preventing the silent execution of embedded instructions.
Audit Metadata