rebasing-branches
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various git commands (
git rebase,git push,git fetch, etc.) and project-specific build or test tools (e.g.,make,npm,bash). These operations are consistent with the skill's primary purpose of managing branch rebases and verifying branch health. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources and local file content, creating an attack surface for indirect prompt injection.
- Ingestion points: Reads content from git conflict stages (
git show :1:<path>) and retrieves pull request metadata via GitHub CLI (gh pr view). - Boundary markers: None identified in the instructions for delimiting external content or ignoring embedded instructions.
- Capability inventory: The skill has the capability to execute shell commands, including
git, project build scripts, and potential automation tools defined in the repository. - Sanitization: No explicit sanitization or filtering of external content is mentioned before the agent processes or reports on conflict resolution.
Audit Metadata