rebase2main
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the shell to execute a series of Git commands including
git branch,git status,git checkout,git rebase, andgit push. These operations are consistent with the skill's stated purpose of automating branch synchronization. - [INDIRECT_PROMPT_INJECTION]: The skill has a data flow where the output of one command is used as an argument for subsequent commands, which is a potential surface for indirect injection if the environment (branch names) is maliciously crafted.
- Ingestion points: The current branch name is captured from the output of
git branch --show-current(SKILL.md). - Boundary markers: No specific boundary markers or delimiters are used for the captured branch name variable when passed to other commands.
- Capability inventory: The skill possesses the capability to switch branches, rebase code, and push to a remote repository via the Git CLI (SKILL.md).
- Sanitization: There is no explicit sanitization of the branch name; however, Git has internal restrictions on valid branch names, and the operations are standard for development workflows.
Audit Metadata