finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard development and version control commands including
git,gh(GitHub CLI), and common test runners (npm,cargo,pytest,go). These operations are consistent with the skill's stated purpose of managing development branch lifecycles. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the local environment, such as branch names and test outputs. It employs safe shell practices, such as using HEREDOCs (
EOF) to handle multi-line string construction for Pull Request bodies, which reduces the risk of unintended command interpolation from project metadata. - [PRIVILEGE_ESCALATION]: The skill uses
git branch -Dandgit worktree remove, which are destructive operations, but it correctly requires explicit user confirmation before executing a full discard of work.
Audit Metadata