start-here

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill employs common git command-line operations (such as git status, git log, git pull, and git rev-parse) to determine the repository's context and synchronization status with its remote. These are standard tools used for its intended workflow management purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads external project documentation and git metadata which could be influenced by external contributors.
  • Ingestion points: The skill reads git log output and repository documentation (File: SKILL.md).
  • Boundary markers: None explicitly defined for untrusted document content.
  • Capability inventory: The skill uses information for high-level workflow decision-making and repository inspection (File: SKILL.md).
  • Sanitization: No filtering or sanitization of ingested text is described.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill promotes positive security practices by instructing users to keep production keys out of the chat and development environment, recommending dedicated production operator files outside the checkout directory instead.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 08:28 PM