git-branch-cleanup
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill performs routine git operations consistent with its documentation.
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute standard git commands (
git fetch,git branch,git push). These operations are strictly limited to branch management and repository synchronization. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of branch names and commit messages from the local repository to generate a summary.
- Ingestion points: Data is read via
git branch -vvand commit logs in SKILL.md (Step 4). - Boundary markers: The summary is clearly delimited in text blocks for the user to review.
- Capability inventory: The skill can delete local branches (
git branch -d) and remote branches (git push origin --delete). - Sanitization: The skill mitigates risks by requiring explicit human confirmation before executing any deletion commands and avoiding the use of force flags (
-D).
Audit Metadata