syncing-main-branch

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Git command-line interface to perform repository management tasks such as checking status, switching branches, and fetching updates. These operations are restricted to the local workspace and its existing configured remotes.\n- [SAFE]: The skill incorporates several critical safety features: (1) Explicit Invocation: It is configured in agents/openai.yaml to require user activation (allow_implicit_invocation: false), preventing it from running automatically on untrusted content. (2) Overwrite Protection: Commands like git switch and git merge in SKILL.md include the --no-overwrite-ignore flag to safeguard local untracked files. (3) Data Integrity: The workflow forces a fast-forward only merge (--ff-only) and requires a clean working directory before proceeding, which prevents accidental loss of uncommitted work or complex merge conflicts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 05:41 PM
Security Audit — agent-trust-hub — syncing-main-branch