merge
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill automates a sequence of standard Git operations including
checkout,pull,merge, andpush. These commands are used for their intended purpose within a software development workflow. - [INDIRECT_PROMPT_INJECTION]: The skill ingests the current branch name via
git rev-parseand uses it as a variable ($FEATURE). While branch names are external data, the skill mitigates risks by requiring interactive user confirmation before performing destructive actions like branch deletion or worktree removal, and by refusing to use force flags (-D) without explicit consent. - [DYNAMIC_EXECUTION]: The skill defines a flow involving multiple shell commands. These are localized to the Git repository environment and follow best practices, such as preferring fast-forward merges and ensuring a clean working tree before proceeding.
Audit Metadata