rebase
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
Bashtool to execute shell commands such asgit status,git stash,git fetch,git rebase, andgit log. These commands are used to automate the git workflow. - [INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to command injection through the processing of untrusted user data.
- Ingestion points: The skill accepts user-provided input via the
$ARGUMENTSvariable inSKILL.md. - Boundary markers: There are no delimiters or boundary markers used to separate user input from the shell command structure.
- Capability inventory: The skill uses the
Bashtool to execute commands based on the parsed$ARGUMENTS. - Sanitization: No sanitization or validation logic is defined to check the
$ARGUMENTSfor shell metacharacters (e.g.,;,&&,|, or backticks), creating a surface for command injection during thegit rebase <target>orgit fetch <remote>steps.
Audit Metadata