rebase-clean

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several shell commands to manage the git workflow and run tests. Specifically, it uses git branch, git checkout, git reset, git fetch, git rebase, git add, git range-diff, git diff, git merge-base, and git log. It also runs a validation pipeline using make test-unit, make test-integration, and make verify. These commands are standard for the stated purpose of code rebasing and verification within a development environment.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes data from the local repository that may be attacker-controlled (e.g., branch names, commit messages, or file contents during conflict resolution).
  • Ingestion points: Untrusted data enters the agent context via git branch --show-current, git rebase (processing file conflicts), and various git diff commands.
  • Boundary markers: None identified. The instructions do not specify delimiters or warnings to ignore embedded instructions in the processed data.
  • Capability inventory: The skill can execute shell commands (git, make) which could be influenced if the agent obeys instructions found in the code or git metadata.
  • Sanitization: No sanitization or escaping of the repository content is performed before it is presented to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 11:32 AM
Security Audit — agent-trust-hub — rebase-clean