skill-finish-branch
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs standard Git and project management operations such as running tests, merging branches, and creating pull requests. These actions are transparent and aligned with the skill's stated purpose.
- [COMMAND_EXECUTION]: The skill executes standard test runners (npm, pytest, cargo, go, make) and Git commands based on the project structure. These operations are gated by the local environment and are standard for developer workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill processes project configuration files and Git history to generate changelogs and review summaries. While this represents a surface where external data (like commit messages) enters the agent's context, it is a standard requirement for the task and does not bypass safety constraints.
- [EXTERNAL_DOWNLOADS]: No remote code is downloaded or executed from external URLs. All referenced scripts (e.g., orchestrate.sh, safe-gh-comment.sh) are located within the local Claude Octopus plugin directory under the user's home directory.
Audit Metadata