ci-pipeline

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses git commands (git branch, git status, git push) to perform its primary function of code synchronization.
  • [COMMAND_EXECUTION]: It integrates with official platform CLIs (glab, gh) to provide status updates, relying on pre-installed, well-known software.
  • [INDIRECT_PROMPT_INJECTION]: The tool ingests the current git branch name as external input. It mitigates potential command injection by wrapping the branch variable in double quotes during execution. Evidence: The ingestion point is git branch --show-current in SKILL.md; boundary markers are absent; capabilities include git push and CLI tool execution; sanitization is performed via shell quoting.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 07:35 AM
Security Audit — agent-trust-hub — ci-pipeline