finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to interact with the local git repository and run project-specific test suites.
- Evidence: Instructions include running
npm test,cargo test,pytest, andgo testfor verification, as well asgit merge,git push, andgit worktree removefor integration and cleanup inSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill's behavior is guided by data ingested from the development environment and external tool outputs, which constitutes a potential attack surface.
- Ingestion points: Git metadata (branch names, worktree paths) retrieved via
git rev-parseand output from project test suites as described inSKILL.md. - Boundary markers: The skill implements a strict decision menu and requires explicit user confirmation before proceeding with integration or deletion.
- Capability inventory: The skill can modify the local file system (merging, branch deletion), perform network operations (pushing to remote), and execute project-defined test code as detailed in
SKILL.md. - Sanitization: The skill relies on explicit user confirmation for the base branch identity and requires a specific keyword ("discard") before performing destructive workspace deletions.
Audit Metadata