git-workflow
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill automates version control tasks by constructing and executing Bash commands for Git operations such as stashing, fetching, rebasing, and pushing. These operations are limited to standard Git functionality used in software development workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes repository metadata, specifically commit messages and CI/CD configuration files, to derive target branches and generate PR descriptions. The implementation includes specific logic to extract literal branch names and uses kebab-case transformation for branch naming, which serves as a safeguard against malicious repository content influencing the execution environment.
Audit Metadata