codex-rebase
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes git metadata and logs which can contain untrusted content from external contributors. \n
- Ingestion points:
preflight.sh,rebase-status.sh, andverify-rebase.shread git logs, commit messages, and range-diff output into the agent context. \n - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present when processing git metadata. \n
- Capability inventory: The skill performs
git fetch,git rebase, and executes project-defined tasks viamise run. \n - Sanitization: Environment variables like
LC_ALLandGIT_EDITORare pinned, and git output formatting is controlled, but the content of commit messages is not filtered for natural language instructions. \n- [COMMAND_EXECUTION]: The skill automates complex git operations including rebasing, stashing, and conflict detection, and it encourages running repository-specific verification tasks usingmise run checkormise run lint. \n- [EXTERNAL_DOWNLOADS]: Thepreflight.shscript performs agit fetchfrom the project'soriginremote to ensure the local default branch is synchronized before rebasing.
Audit Metadata