branch-status
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local script
scripts/collect.shand standard Git/GitHub CLI tools (git,gh) to retrieve branch metadata, commit history, and pull request information. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, including commit messages and pull request text. It contains a robust safety instruction requiring the agent to treat all repository output as evidence only, preventing these strings from being interpreted as instructions for tool use or configuration changes.
- [EXTERNAL_DOWNLOADS]: The skill references and retrieves instructional documentation and output schemas from the author's GitHub repository.
Audit Metadata