git-branch-cleanup
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests commit subjects and branch names from the local repository and displays them to the agent during analysis.\n
- Ingestion point:
SKILL.md(Workflow Step 1) usinggit for-each-refto extract%(contents:subject).\n - Boundary markers: Absent; commit subjects are displayed without delimiters that would prevent them from being interpreted as instructions.\n
- Capability inventory: The skill can execute branch deletions (
git branch -d) and worktree removals (git worktree remove).\n - Sanitization: No sanitization or escaping of commit messages is performed.\n- [COMMAND_EXECUTION]: The skill performs repository modifications through shell commands.\n
- Evidence: Uses
git branch -d,git branch -D, andgit worktree removeto delete local data.\n - Context: These operations are consistent with the skill's primary purpose and include logical guards for protected branches like
mainandmaster.
Audit Metadata