force-push-downstream
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute several Git commands (
git branch,git status,git rev-parse,git push) to manage repository state and push branches to the remote origin. - [COMMAND_EXECUTION]: The skill executes a local shell script (
detect-chain.sh) located in the.claude/skills/rebase-downstream/directory to identify the branch hierarchy. - [SAFE]: Dynamic context injection (
!) is used in theSKILL.mdfile to fetch the current branch and status. These commands are benign and used only for status reporting to the user at load time. - [SAFE]: The skill follows security best practices for Git by mandating the use of
--force-with-leaseto prevent accidental overwrites of remote work and requiring user confirmation before proceeding with pushes. - [SAFE]: The skill uses
disable-model-invocation: truein its configuration, which is a security hardening measure that prevents the model from invoking additional tools during the execution of this skill.
Audit Metadata