ci-pipeline
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
gitcommands (git branch,git status,git push) to perform its primary function of code synchronization. - [COMMAND_EXECUTION]: It integrates with official platform CLIs (
glab,gh) to provide status updates, relying on pre-installed, well-known software. - [INDIRECT_PROMPT_INJECTION]: The tool ingests the current git branch name as external input. It mitigates potential command injection by wrapping the branch variable in double quotes during execution. Evidence: The ingestion point is
git branch --show-currentinSKILL.md; boundary markers are absent; capabilities includegit pushand CLI tool execution; sanitization is performed via shell quoting.
Audit Metadata