finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the local repository environment to inform its workflow and generate outputs.
- Ingestion points: Reads
AGENTS.md, maintainer documentation, and the current branch's commit history and code diffs to generate PR summaries (SKILL.md). - Boundary markers: None explicitly defined for the file read operations.
- Capability inventory: The skill has the capability to execute shell commands for testing, git operations, and GitHub CLI interactions.
- Sanitization: PR bodies are constructed using heredocs (
EOF), which mitigates basic command injection, but the LLM-generated content derived from the repository could still be manipulated by malicious content within the analyzed files. - [COMMAND_EXECUTION]: The skill relies on executing various system commands to fulfill its development workflow automation.
- Tool usage: Uses
gitfor branch switching, merging, and worktree management;ghfor pull request creation; and language-specific test runners includingnpm,cargo,pytest, andgo. - Execution pattern: Commands are largely static templates that incorporate variable branch names and programmatically generated PR descriptions.
Audit Metadata