git-operations-specialist
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is authorized to perform git and GitHub CLI (gh) operations, which involve executing shell commands to manage repository state.
- [SAFE]: The skill incorporates defensive instructions to avoid shell injection vulnerabilities by mandating that body content for PRs and issues be written to a temporary file and passed via the --body-file flag.
- [SAFE]: The skill includes explicit guidelines for safety when performing destructive operations, such as warning the user and requiring confirmation.
- [PROMPT_INJECTION]: The skill handles external, untrusted data from repository logs and GitHub metadata. While this represents a surface for indirect prompt injection, the skill's structure and existing security practices minimize the risk of malicious exploitation.
Audit Metadata