git-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
worktreecommand inscripts/git-workflowtriggers automated execution of package managers and test suites based on repository content. - Automated installation tools detected:
npm install,cargo build,pip install,poetry install,go mod download, andpip install -e .. - Automated test execution:
npm test,cargo test,go test, andmake test. - [INDIRECT_PROMPT_INJECTION]: The skill ingests configuration data from local project files that influence its execution flow.
- Ingestion points:
CLAUDE.md(viagrepfor worktree path) andpackage.json(viasedfor test scripts) inscripts/git-workflow. - Boundary markers: None identified. The skill trusts the content of these files once a specific keyword or structure is found.
- Capability inventory: File system access (
mkdir), file writing (appending to.gitignore), and command execution through subprocess calls to development tools. - Sanitization: Lacks robust sanitization of values extracted from these files before they are used in shell command construction.
- [DYNAMIC_EXECUTION]: The tool performs runtime execution of commands and build processes that are dynamically determined by the project's own configuration files, such as
package.jsonandMakefile.
Audit Metadata