git-workflow

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [Command Execution]: The skill utilizes standard Git commands (git clone, git add, git commit, git format-patch) to facilitate local version control workflows. These commands are used for their intended purpose of managing code changes and generating diff files.
  • [External Repository Access]: The instructions involve cloning repositories from GitHub. GitHub is a well-known and established platform for source code hosting. The skill correctly specifies accessing repositories via HTTPS.
  • [Indirect Prompt Injection Surface]: As the skill involves cloning and editing external code, there is an inherent surface where the agent might process instructions embedded within the source code of the cloned repository. This is a common characteristic of development-oriented skills; maintaining awareness of the source of repositories being cloned is a standard safety practice.
  • [Least Privilege Configuration]: The skill includes explicit instructions to avoid high-privilege actions, such as pushing to remote repositories or using the GitHub CLI (gh). This restricts the agent's scope to local changes and patch generation, which enhances the security posture of the workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 06:45 AM
Security Audit — agent-trust-hub — git-workflow