git-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific files to determine execution logic.
- Ingestion points: Reads
CLAUDE.mdand manifest files likepackage.jsonorrequirements.txtfrom the local repository. - Boundary markers: Lacks explicit delimiters or instructions to ignore embedded commands within the ingested files.
- Capability inventory: Employs multiple shell-based tools including
git,npm,pip,cargo,go, andghfor environment setup and lifecycle management. - Sanitization: Content from configuration files is used to drive command execution paths without explicit sanitization.
- [COMMAND_EXECUTION]: The skill automates development tasks using system-level CLI tools.
- Evidence: Orchestrates
git worktreefor isolation,npm/pip/cargo/gofor dependency management, andnpm test/pytestfor verification. - [EXTERNAL_DOWNLOADS]: The skill communicates with external git remotes and the GitHub platform.
- Evidence: Synchronizes with remote repositories using
git pullandgit push, and interacts with GitHub APIs via theghCLI tool.
Audit Metadata