smooth-rebase
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a variety of standard Git CLI commands to manage the repository state. This includes querying the current status, identifying the default branch via symbolic references, and executing the rebase process. These commands are appropriate for the tool's stated purpose of repository management.
- [DATA_EXFILTRATION]: The skill performs network operations using
git fetch,git ls-remote, andgit push. These operations are limited to the user's configured remotes and are required to synchronize the local branch with the repository's default branch. - [PROMPT_INJECTION]: As the skill reads and resolves code conflicts, it may process untrusted data embedded in the source code. However, the skill implements a defense-in-depth approach by instructing the agent to perform semantic analysis and halt for user confirmation whenever the intent of a change is unclear, mitigating the risk of indirect instruction obedience.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected. The skill maintains transparency by reporting its decision logic for each conflict resolution to the user.
Audit Metadata