finishing-a-development-branch

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard Git commands (git merge, git push, git branch, git worktree) and project test runners (npm test, pytest, etc.) to manage code integration. These commands are integral to the stated purpose of the skill and are executed within the local repository context.
  • [PROMPT_INJECTION]: The instructions include specific guidance for the AI to present menus and wait for human confirmation. These are functional control flow instructions rather than attempts to bypass safety filters or manipulate the underlying LLM's behavioral constraints.
  • [DATA_EXPOSURE]: Environment detection is performed using git rev-parse to identify repository paths and worktree locations. These paths are used locally for repository management and are not exfiltrated to external domains.
  • [REMOTE_CODE_EXECUTION]: The skill does not involve downloading or executing scripts from remote, untrusted sources. It relies on the project's existing test infrastructure and standard development tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 01:43 PM
Security Audit — agent-trust-hub — finishing-a-development-branch