git-branch-cleanup
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's functionality is strictly limited to local git branch management with multiple safety checks to prevent data loss and unauthorized deletions.- [COMMAND_EXECUTION]: Uses local shell commands to interact with the git CLI. The operations are standard for repository maintenance and do not involve suspicious parameters.- [INDIRECT_PROMPT_INJECTION]: The skill processes branch names from the local repository as data. While these names come from an external source (the repository state), they are treated as literal identifiers and not interpreted as instructions.
- Ingestion points: The skill reads local branch names using
git for-each-refin SKILL.md. - Boundary markers: The skill presents branch names in a plain list to the user for confirmation, providing clear context.
- Capability inventory: The skill can perform local branch deletions using
git branch -das specified in SKILL.md. - Sanitization: Branch names are retrieved directly from git metadata; the primary safeguard is the mandatory user confirmation (Step 4) which prevents automated exploitation.
Audit Metadata