rebase
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various git and npm commands to manage branch state, resolve conflicts, and verify project health. These include 'git rebase', 'npm install', 'npm run build', and 'npm run lint-fix'. These are standard operations for a development-focused agent skill.
- [EXTERNAL_DOWNLOADS]: The skill may download dependencies via 'npm install' when changes are detected in 'package-lock.json'. It also performs 'git fetch' to update remote tracking branches. These interactions target well-known package registries and git remotes.
- [INDIRECT_PROMPT_INJECTION]: The skill reads conflicting files containing potential attacker-controlled content (conflict markers). While this presents an ingestion surface for untrusted data, the agent's instructions focus on mechanical conflict resolution and subsequent build verification, which limits the risk of following instructions embedded in source code.
Audit Metadata