move-branch-here
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes shell scripts and Git commands to perform worktree management, including branch resolution and state manipulation. It also optionally executes a Node.js script from an external skill directory.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external inputs such as branch names and directory paths, which are interpolated into shell commands. This creates an attack surface, though it is mitigated by branch validation logic.\n
- Ingestion points: Branch names and worktree paths provided to the script commands in SKILL.md.\n
- Boundary markers: No explicit delimitation or sanitization of input strings before interpolation, other than Git's internal validation.\n
- Capability inventory: Execution of Git commands and Node.js scripts with local file system access.\n
- Sanitization: The script uses
git show-ref --verifyto confirm branch existence before proceeding, preventing the use of arbitrary non-branch strings in some operations.
Audit Metadata