git-clean-gone-branches
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate maintenance tasks using standard git commands like git fetch and git branch.
- [SAFE]: A mandatory manual confirmation step is implemented in Step 2 before any destructive actions are taken, ensuring the user reviews the list of branches to be deleted.
- [SAFE]: Analysis of indirect prompt injection (Category 8): 1. Ingestion points: Untrusted branch names are read from the remote via scripts/clean-gone. 2. Boundary markers: None. 3. Capability inventory: Includes branch deletion and worktree removal. 4. Sanitization: The script performs basic validation on extracted tokens and the workflow requires human-in-the-loop approval, which effectively prevents the execution of malicious branch names.
Audit Metadata