conventional-branch
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell scripts and Git commands to automate development workflows.
- Evidence: the workflow section includes
git symbolic-ref,git show-ref,git checkout, andgit pull. - Purpose: these operations are used to identify the repository's default trunk branch and manage the creation of new branches based on specified types.
- [PROMPT_INJECTION]: The skill processes user-supplied data (branch descriptions) which are interpolated into command execution.
- Ingestion points: user provided branch type and description are gathered in Step 1 of the workflow.
- Capability inventory: the resulting name is passed to the
git checkout -bcommand in Step 4. - Sanitization: the instructions in Step 2 explicitly guide the agent to normalize input (lowercase, character substitution for spaces and underscores) to prevent invalid branch names and reduce command injection surface.
Audit Metadata