sync-branches
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust verification-first workflow for Git operations, ensuring that the agent validates commit hashes (OIDs) and remote identities before performing any network or write operations.
- [SAFE]: A 'Scope Contract' is explicitly defined within the skill to protect sensitive information such as credentials and to prevent prohibited effects like 'wrong-destination push' or 'dropping commits'.
- [SAFE]: The instructions mandate the use of the 'narrowest operation' to achieve the desired postcondition, adhering to the principle of least privilege in execution.
- [SAFE]: No obfuscation, prompt injection attempts, or unauthorized external connections were detected in the skill or its reference materials.
Audit Metadata