conventional-branch
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard Git commands to determine the repository's main branch and perform branch creation. These commands are localized to the Git environment and are used for their intended purpose.- [INDIRECT_PROMPT_INJECTION]: The skill processes user input for branch descriptions. It mitigates potential injection risks by explicitly instructing the agent to validate and sanitize the input (lowercase, alphanumeric characters, hyphens, and dots only) before using it in shell commands. This mandatory validation step prevents malicious input from affecting the final Git commands.- [EXTERNAL_DOWNLOADS]: Includes links to the Conventional Branch and Conventional Commits websites, as well as the 'commit-check' tool on GitHub. These are provided as informational resources for users to understand and enforce the naming convention and do not involve automated execution of untrusted code.
Audit Metadata