git
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute standard Git commands for workflow management.
- Evidence: Subcommands 'setup', 'sync', and 'publish' use commands like 'git checkout', 'git pull', 'git fetch', and 'git rebase'.
- Evidence: A universal 'Guard' section ensures 'git stash push -u' and 'git stash pop' are used to protect local changes.
- [DATA_EXFILTRATION]: The skill interacts with the local file system and remote Git repositories.
- Evidence: Reads '.fullstack-dev/config.json' and CI/CD files like '.github/workflows/*.yml' to identify target branches.
- Evidence: Pushes changes to the 'origin' remote and uses 'mcp__github__create_pull_request' for PR creation, which are legitimate behaviors.
- [PROMPT_INJECTION]: The skill processes Git commit history and configuration files to automate workflow tasks.
- Evidence: Parses commit prefixes and ticket IDs from 'git log' to generate branch names.
- Evidence: Generates PR titles and bodies based on commit messages and task context, which acts on data without overriding agent instructions.
Audit Metadata