gt-flow
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive instructions for managing developer workflows with Graphite and Git. It includes safety measures like the 'zero-lost-code contract' and explicit handoff protocols between environments to protect project integrity.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted plan descriptions and design documents to determine Git stacking strategies. While this introduces an indirect prompt injection surface, the risk is mitigated by the skill's focus on repository management rather than executing untrusted code.
- Ingestion points: Change intent and design documents from chat or external files (SKILL.md).
- Boundary markers: Not present.
- Capability inventory: Broad use of git and gt CLI commands for repository state management.
- Sanitization: No explicit validation of external input content.
Audit Metadata