finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands to manage Git workflows, including
git merge,git checkout,git push, andgit worktree. It also executes common test runners likenpm,cargo,pytest, andgo. These actions are inherent to the skill's primary purpose of development branch management. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the environment, such as Git branch names, commit lists, and test output, which are then used in command arguments and Pull Request descriptions. However, the risk is assessed as low given the structured nature of the workflow and the use of heredocs for PR body generation.
Audit Metadata