finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development and version control commands including git for branch management, gh for Pull Request creation, and various language-specific test runners (npm, cargo, pytest, go).
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for generating Pull Request descriptions based on implementation changes. This creates a surface where external content from the codebase or commit history is ingested and processed by the agent. The skill mitigates this by using a shell heredoc (EOF) to delimit the PR body content.
- Ingestion points: Git commit history and implemented source code (via the agent's summary of changes).
- Boundary markers: Utilizes
EOFheredoc markers for the Pull Request body template. - Capability inventory: File system access (reading files), command execution (git, gh, test runners), and network operations (git push, gh pr create).
- Sanitization: Relies on the agent's ability to summarize implementation details into the structured PR template provided.
Audit Metadata