update-base-branch
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes repository metadata such as branch names and status which originates from external sources and could theoretically contain malicious content. * Ingestion points: Git repository metadata, branch names, and status output processed by the agent as described in SKILL.md. * Boundary markers: The skill does not use specific delimiters but instructs the agent to verify states and ask the user for confirmation in case of ambiguity. * Capability inventory: The skill utilizes the agent's ability to execute Git commands (checkout, fetch, merge) to modify the local repository state. * Sanitization: The skill implements strict logical checks (e.g., verifying a branch is an ancestor before fast-forwarding) which limits the impact of malicious data.
Audit Metadata