rebase-on-main
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute multiple git commands, including
git fetch,git checkout,git rebase, andgit push --force-with-lease. While these are standard developer tools, they allow modification of the repository and its remote history. - [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to read and interpret the contents of conflicting files to resolve rebase issues (Step 7). This presents an attack surface where malicious instructions embedded in a pull request or file could attempt to hijack the agent's logic during the resolution process.
- Ingestion points: Reading content from conflicting files in the repository (
SKILL.md, Step 7). - Boundary markers: None. The agent is not instructed to treat the file content as untrusted data or to ignore embedded instructions.
- Capability inventory: The skill allows the agent to stage files (
git add), continue rebase operations, and push changes to a remote repository (git push --force-with-lease). - Sanitization: No validation or sanitization is performed on the content of the files being resolved.
Audit Metadata