krt-rebase-smith
Pass
Audited by Gen Agent Trust Hub on May 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for standard Git repository maintenance. It enforces safety protocols, including the refusal to rebase protected branches (main, master, develop) and the requirement for a clean working tree before operations begin.
- [COMMAND_EXECUTION]: The skill utilizes local Git commands to perform rebases and push updates. Destructive operations like force-pushing are protected by the use of
--force-with-leaseand mandatory user confirmation steps before execution. - [PROMPT_INJECTION]: A potential surface for indirect prompt injection exists as the skill processes Git branch names and commit logs.
- Ingestion points: Untrusted data enters the context via
git branch,git log, andgit statusoutputs inSKILL.md. - Boundary markers: Not present; the skill does not explicitly delimit Git output or provide instructions to ignore embedded instructions in commit messages.
- Capability inventory: The skill allows the execution of
git switch,git rebase, andgit pushcommands as seen inSKILL.md. - Sanitization: Not present; branch names and commit messages are used directly in Git commands without specific validation or escaping.
Audit Metadata