worktrees
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill outlines a workflow that ingests data from local git branch names to extract task or story identifiers for cross-referencing with external project systems.
- Ingestion points: Git branch names parsed within
references/cleanup-strategies.md. - Boundary markers: Absent; no special boundaries or verification rules are specified for branch name formats.
- Capability inventory: Local execution of standard git utilities and disk monitoring tools.
- Sanitization: Absent; the guidelines rely on standard double-quoting in shell scripts but do not detail validation or sanitization routines for the branch string content.
- [COMMAND_EXECUTION]: Contains instructions for executing standard git commands, repository disk management commands (
du), and invoking platform-appropriate package managers (such asnpm,pip,poetry, andcargo) depending on the lockfiles detected in the repository. These operations are standard and confined to the local workspace environment.
Audit Metadata