finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs several shell operations using
gitandcd. It interpolates variables such as<base-branch>,<feature-branch>, and<test command>directly into shell execution strings (e.g.,git merge <feature-branch>,git branch -d <feature-branch>). If an attacker provides a branch name containing shell metacharacters, it could lead to arbitrary command execution. - [SAFE]: The skill includes a human-in-the-loop safety mechanism for destructive actions. It requires the explicit typed confirmation 'discard' before force-deleting branches or removing worktrees.
- [SAFE]: The cleanup logic in Step 6 is restricted to specific directory patterns (
.worktrees/orworktrees/). This serves as a safety constraint that prevents the skill from deleting arbitrary directories on the host system.
Audit Metadata