branch-naming
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool and Python'ssubprocess.run()inscripts/validate.pyto interact with Git (e.g.,git branch --listandgit ls-remote). These operations are used for legitimate validation tasks and are implemented safely using argument lists. The inputs provided to these commands are strictly sanitized and validated against a character whitelist (alphanumeric and hyphens) before execution, preventing command injection. - [EXTERNAL_DOWNLOADS]: The skill performs a network operation via
git ls-remoteto check theoriginremote for existing branches. This is a standard Git workflow operation consistent with the skill's primary purpose and does not involve downloading or executing arbitrary code from untrusted sources.
Audit Metadata