prune-local-branches
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/classify.pyscript executes localgitandgh(GitHub CLI) commands viasubprocess.run. The implementation follows security best practices by passing arguments as a list rather than raw strings, which effectively mitigates the risk of shell injection attacks. - [EXTERNAL_DOWNLOADS]: The skill utilizes the GitHub CLI to fetch pull request metadata from GitHub. This is a legitimate interaction with a well-known service that is necessary for the skill's stated purpose of identifying squash-merged branches.
Audit Metadata