merge
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard Git commands and a project-specific CLI tool called
workmux. These operations are limited to local repository management (status, add, commit, config, rebase, and log) and are consistent with the skill's stated purpose of automating a development workflow. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from
git statusandgit logto inform the agent's actions during conflict resolution. While this involves processing untrusted content from the repository history, the instructions require the agent to review the changes and resolve conflicts manually, mitigating the risk of automated instruction execution. No sensitive capabilities or network operations are triggered by the ingested data.
Audit Metadata