git-workflow

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill automates version control tasks by constructing and executing Bash commands for Git operations such as stashing, fetching, rebasing, and pushing. These operations are limited to standard Git functionality used in software development workflows.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes repository metadata, specifically commit messages and CI/CD configuration files, to derive target branches and generate PR descriptions. The implementation includes specific logic to extract literal branch names and uses kebab-case transformation for branch naming, which serves as a safeguard against malicious repository content influencing the execution environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 04:49 PM
Security Audit — agent-trust-hub — git-workflow