jujutsu-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a set of instructions and scripts designed to manage Jujutsu (jj) repositories. No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected.
- [COMMAND_EXECUTION]: The skill uses standard version control commands (
jj,git,gh,glab). These are restricted to the intended purpose of source code management and PR handling. - [EXTERNAL_DOWNLOADS]: The skill references official repositories and tools (GitHub, GitLab, Jujutsu). These are well-known, trusted services, and the references are for documentation and standard workflow purposes, which is safe per established security guidelines.
- [INDIRECT_PROMPT_INJECTION]: The skill includes scripts that process repository state (e.g.,
git status,jj log). While this presents a theoretical attack surface common to all version control tools, the scripts include defensive practices like JSON escaping for output and provide clear verification gates to maintain integrity. The risk is assessed as safe/minimal given the tool's primary purpose.
Audit Metadata