git-workflow
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Command Execution]: The skill utilizes standard Git commands (
git clone,git add,git commit,git format-patch) to facilitate local version control workflows. These commands are used for their intended purpose of managing code changes and generating diff files. - [External Repository Access]: The instructions involve cloning repositories from GitHub. GitHub is a well-known and established platform for source code hosting. The skill correctly specifies accessing repositories via HTTPS.
- [Indirect Prompt Injection Surface]: As the skill involves cloning and editing external code, there is an inherent surface where the agent might process instructions embedded within the source code of the cloned repository. This is a common characteristic of development-oriented skills; maintaining awareness of the source of repositories being cloned is a standard safety practice.
- [Least Privilege Configuration]: The skill includes explicit instructions to avoid high-privilege actions, such as pushing to remote repositories or using the GitHub CLI (
gh). This restricts the agent's scope to local changes and patch generation, which enhances the security posture of the workflow.
Audit Metadata