rebase-clean
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several shell commands to manage the git workflow and run tests. Specifically, it uses
git branch,git checkout,git reset,git fetch,git rebase,git add,git range-diff,git diff,git merge-base, andgit log. It also runs a validation pipeline usingmake test-unit,make test-integration, andmake verify. These commands are standard for the stated purpose of code rebasing and verification within a development environment. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes data from the local repository that may be attacker-controlled (e.g., branch names, commit messages, or file contents during conflict resolution).
- Ingestion points: Untrusted data enters the agent context via
git branch --show-current,git rebase(processing file conflicts), and variousgit diffcommands. - Boundary markers: None identified. The instructions do not specify delimiters or warnings to ignore embedded instructions in the processed data.
- Capability inventory: The skill can execute shell commands (
git,make) which could be influenced if the agent obeys instructions found in the code or git metadata. - Sanitization: No sanitization or escaping of the repository content is performed before it is presented to the agent.
Audit Metadata