branch
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard git commands (git diff, git pull, git checkout, git switch) to perform its primary function of branch management. These operations are local to the repository and follow standard development workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from git diffs, GitHub issue titles, and user descriptions to generate branch names.
- Ingestion points: SKILL.md describes deriving slugs from git diff output and GitHub issue titles.
- Boundary markers: Not explicitly defined, but the instructions require the output to be a slug (lowercase, kebab-case).
- Capability inventory: git commands for branching and pulling.
- Sanitization: The mandatory transformation of external input into a kebab-case slug acts as a built-in sanitization step, which mitigates the risk of arbitrary command injection via malformed branch names.
Audit Metadata