codex-rebase

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes git metadata and logs which can contain untrusted content from external contributors. \n
  • Ingestion points: preflight.sh, rebase-status.sh, and verify-rebase.sh read git logs, commit messages, and range-diff output into the agent context. \n
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present when processing git metadata. \n
  • Capability inventory: The skill performs git fetch, git rebase, and executes project-defined tasks via mise run. \n
  • Sanitization: Environment variables like LC_ALL and GIT_EDITOR are pinned, and git output formatting is controlled, but the content of commit messages is not filtered for natural language instructions. \n- [COMMAND_EXECUTION]: The skill automates complex git operations including rebasing, stashing, and conflict detection, and it encourages running repository-specific verification tasks using mise run check or mise run lint. \n- [EXTERNAL_DOWNLOADS]: The preflight.sh script performs a git fetch from the project's origin remote to ensure the local default branch is synchronized before rebasing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 05:23 AM