finishing-a-development-branch

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard development and version control commands including git, npm, cargo, pytest, go, and gh (GitHub CLI). These operations are restricted to the local development environment and the project's origin repository.
  • [SAFE]: The process enforces a 'Verify Tests' step (Step 1) that prevents the agent from proceeding with merges or pull requests if the project's test suite fails.
  • [SAFE]: Destructive operations, such as discarding work (Option 4), require an explicit, typed confirmation ('discard') from the user before executing git branch -D.
  • [SAFE]: The skill demonstrates best practices for shell command safety by using single-quoted heredocs ('EOF') in Step 4, which prevents unintended shell expansion of the PR template content.
  • [SAFE]: Worktree management (Step 5) is handled conditionally based on the chosen workflow, ensuring that development environments are cleaned up only when appropriate.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 12:14 AM
Security Audit — agent-trust-hub — finishing-a-development-branch