git-post-merge-cleanup
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the local git environment (branch names, worktree lists, and status output) which can be influenced by external contributors in shared repositories.
- Ingestion points: The agent reads output from commands like
git branch -vv,git worktree list, andgit statusinSKILL.mdand reference files. - Boundary markers: The skill explicitly instructs the agent to present a comprehensive plan to the user and wait for confirmation before executing destructive commands, providing a human-in-the-loop safety mechanism.
- Capability inventory: The skill utilizes the
Bashtool to perform branch deletions (git branch -d), worktree removals (git worktree remove --force), and remote ref pruning (git push origin --delete). - Sanitization: The skill implements strict classification rules in
references/branch-classification.mdandreferences/worktree-cleanup-rules.mdto ensure only merged or identical content is targeted for removal.
Audit Metadata