skills/srstomp/pokayokay/worktrees/Gen Agent Trust Hub

worktrees

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill outlines a workflow that ingests data from local git branch names to extract task or story identifiers for cross-referencing with external project systems.
  • Ingestion points: Git branch names parsed within references/cleanup-strategies.md.
  • Boundary markers: Absent; no special boundaries or verification rules are specified for branch name formats.
  • Capability inventory: Local execution of standard git utilities and disk monitoring tools.
  • Sanitization: Absent; the guidelines rely on standard double-quoting in shell scripts but do not detail validation or sanitization routines for the branch string content.
  • [COMMAND_EXECUTION]: Contains instructions for executing standard git commands, repository disk management commands (du), and invoking platform-appropriate package managers (such as npm, pip, poetry, and cargo) depending on the lockfiles detected in the repository. These operations are standard and confined to the local workspace environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:55 AM