git-advanced-workflows
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for Git version control management. All included commands and procedures are standard practices for developers and align with the skill's stated purpose.
- [COMMAND_EXECUTION]: The skill provides examples for executing local commands like
npm testandgit bisect run ./test.sh. These are standard tools for automated testing within a repository and do not involve remote code execution or untrusted downloads. - [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external repository data (such as commit history and local scripts during a
git bisect run), this is an inherent function of the Git tools described. The instructions do not facilitate the ingestion of malicious instructions from untrusted external sources into the agent's control flow. - [SAFE]: The content explicitly encourages security and safety best practices, such as using the
--force-with-leaseflag instead of a standard force push and creating backup branches before performing history-altering operations.
Audit Metadata