git-branch-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill references a local Python script,
scripts/validate_git_contract.py, for manifest validation. This script uses standard built-in libraries (json,argparse,pathlib) and does not perform any dangerous shell operations or network requests. - [INDIRECT_PROMPT_INJECTION]: The skill provides logic to ingest and validate user-supplied JSON manifests. While this serves as a data ingestion point, the validation process is structural and does not interpolate untrusted data into instructions or execute it as code.
- [DATA_EXFILTRATION]: Analysis of the skill instructions and the accompanying script confirms there are no network operations, hardcoded credentials, or attempts to access sensitive system files.
Audit Metadata