git-advanced-workflows
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples of Git and shell commands (e.g.,
git rebase,git cherry-pick,git worktree,npm test,git bisect run). While these are standard developer tools, they execute arbitrary code or scripts on the user's system. - [INDIRECT_PROMPT_INJECTION]: As a tool that may process repository data or commit messages, it has an inherent attack surface for indirect prompt injection (e.g., if an attacker crafts a malicious commit message that influences the agent's behavior during a rebase or log analysis). No explicit sanitization logic is provided in the documentation.
Audit Metadata