merge

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates a sequence of standard Git operations including checkout, pull, merge, and push. These commands are used for their intended purpose within a software development workflow.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests the current branch name via git rev-parse and uses it as a variable ($FEATURE). While branch names are external data, the skill mitigates risks by requiring interactive user confirmation before performing destructive actions like branch deletion or worktree removal, and by refusing to use force flags (-D) without explicit consent.
  • [DYNAMIC_EXECUTION]: The skill defines a flow involving multiple shell commands. These are localized to the Git repository environment and follow best practices, such as preferring fast-forward merges and ensuring a clean working tree before proceeding.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:11 PM