skills/raine/workmux/merge/Gen Agent Trust Hub

merge

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard Git commands and a project-specific CLI tool called workmux. These operations are limited to local repository management (status, add, commit, config, rebase, and log) and are consistent with the skill's stated purpose of automating a development workflow.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from git status and git log to inform the agent's actions during conflict resolution. While this involves processing untrusted content from the repository history, the instructions require the agent to review the changes and resolve conflicts manually, mitigating the risk of automated instruction execution. No sensitive capabilities or network operations are triggered by the ingested data.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 11:19 AM