finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various development tools and git commands (npm, pytest, cargo, go, git, gh) to automate workflow steps. This is consistent with its stated purpose of facilitating development branch completion.- [DATA_EXPOSURE_AND_EXFILTRATION]: While the skill interacts with the GitHub API via the
ghCLI, this is restricted to the legitimate purpose of creating pull requests and pushing code to the user's configured repositories. It also accesses environment variables like GIT_DIR and GIT_COMMON to determine the repository state.- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data such as branch names and test output. While it lacks explicit sanitization for these variables when interpolated into shell commands (e.g., in the PR title or body), the risk is minimized by the structured process and the requirement for user confirmation before destructive actions like discarding work.
Audit Metadata