git-flow-branch-creator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands such as
git status,git diff, andgit checkoutto perform its primary function of repository analysis and branch management. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection because it processes untrusted data from repository files.
- Ingestion points: The workflow in
SKILL.mdrelies ongit statusandgit diffto ingest current repository changes into the agent's context. - Boundary markers: The instructions do not define clear delimiters or "ignore" instructions for the data retrieved from
git diff, potentially allowing embedded instructions in code to influence the agent. - Capability inventory: The skill has the capability to execute shell commands for branch creation and switching (
git checkout -b). - Sanitization: There is no evidence of sanitization or validation performed on the diff output before it is analyzed by the agent.
Audit Metadata