git-workflow

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The worktree command in scripts/git-workflow triggers automated execution of package managers and test suites based on repository content.
  • Automated installation tools detected: npm install, cargo build, pip install, poetry install, go mod download, and pip install -e ..
  • Automated test execution: npm test, cargo test, go test, and make test.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests configuration data from local project files that influence its execution flow.
  • Ingestion points: CLAUDE.md (via grep for worktree path) and package.json (via sed for test scripts) in scripts/git-workflow.
  • Boundary markers: None identified. The skill trusts the content of these files once a specific keyword or structure is found.
  • Capability inventory: File system access (mkdir), file writing (appending to .gitignore), and command execution through subprocess calls to development tools.
  • Sanitization: Lacks robust sanitization of values extracted from these files before they are used in shell command construction.
  • [DYNAMIC_EXECUTION]: The tool performs runtime execution of commands and build processes that are dynamically determined by the project's own configuration files, such as package.json and Makefile.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 09:48 PM