syncing-main-branch
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Git command-line interface to perform repository management tasks such as checking status, switching branches, and fetching updates. These operations are restricted to the local workspace and its existing configured remotes.\n- [SAFE]: The skill incorporates several critical safety features: (1) Explicit Invocation: It is configured in
agents/openai.yamlto require user activation (allow_implicit_invocation: false), preventing it from running automatically on untrusted content. (2) Overwrite Protection: Commands likegit switchandgit mergeinSKILL.mdinclude the--no-overwrite-ignoreflag to safeguard local untracked files. (3) Data Integrity: The workflow forces a fast-forward only merge (--ff-only) and requires a clean working directory before proceeding, which prevents accidental loss of uncommitted work or complex merge conflicts.
Audit Metadata