git-advanced-workflows
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a set of standard Git commands for repository management. These commands are local and intended for development workflows, posing no security risk in their documented context.
- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection as it involves processing repository data.
- Ingestion points: The agent is instructed to read Git commit messages, history, and file contents using commands like
git log,git reflog, andgit show. - Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the Git data.
- Capability inventory: The skill demonstrates how to automate bug-finding using
git bisect run, which executes scripts liketest.shornpm testbased on the repository state. - Sanitization: No sanitization or validation of the input data from the repository is performed.
Audit Metadata