git-bisect-debugging
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various git commands such as git bisect, git status, git log, and git show to manage the repository state and identify breaking commits.
- [DYNAMIC_EXECUTION]: The skill generates and executes shell scripts based on a provided template (scripts/bisect-test-template.sh) to automate the testing of different commits during the bisect process.
- [EXTERNAL_DOWNLOADS]: The provided test script template suggests using package managers like npm or pip to install dependencies for each commit, which involves downloading content from well-known official registries.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the git repository history and user-supplied scripts which could potentially contain malicious instructions. The skill mitigates this risk by enforcing the use of isolated subagents via the Task tool for all verification and script execution phases, ensuring the main environment remains protected.
Audit Metadata