git-workflow-manager
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists of markdown instructions and static JSON data files. No executable code (Python, JavaScript, or Shell scripts) is included in the skill package.\n- [SAFE]: The
allowed-toolsconfiguration is set to an empty string, which restricts the agent from utilizing any system tools or external capabilities during execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve analyzing external repository data (such as commit history and team practices). While this is a known surface for indirect prompt injection, the risk is mitigated by the lack of tool access and the absence of any commands that would execute code based on that data.
Audit Metadata