prepare-branch-context
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
gitandgh(GitHub CLI) to retrieve branch information, commit history, and pull request metadata. These commands are limited to data retrieval purposes and do not involve writing to the filesystem or executing arbitrary user-provided code. - [PROMPT_INJECTION]: The skill is subject to an indirect prompt injection surface as it ingests untrusted data from
git diff,git log, andgh pr list(specifically in steps 2, 3, and 4 of SKILL.md). There are no explicit boundary markers or sanitization steps mentioned. However, because the skill is strictly restricted to read-only operations and its primary function is to summarize existing information, the risk associated with malicious instructions embedded in the codebase or PR metadata is minimal. The instructions explicitly state: 'Do NOT make any changes to files. This skill is read-only.'
Audit Metadata