branch-readiness-checks
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands such as
git,node,yarn,rg, andgrep. These are used to determine project state, run maintenance scripts (e.g.,scripts/check_changes.ts,scripts/lint_ts_projects.js), and run tests. This behavior is confined to the local repository environment and is consistent with developer workflow automation.\n- [PROMPT_INJECTION]: The skill ingests data from local project files and command outputs (Indirect Prompt Injection surface). Ingestion points:kibana.jsonc,tsconfig.json, andgit diffoutput. Boundary markers: None. Capability inventory: Local shell execution of project-specific scripts. Sanitization: None. Given the specific project context and the use of thedisable-model-invocationflag, this is considered a safe application of the capability.
Audit Metadata