git-flow-branch-creator
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands locally, specifically 'git status', 'git diff', and 'git checkout -b'. These are used to inspect the repository state and perform branch creation tasks.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted content from the repository files during the 'Change Nature Analysis' phase. \n- Ingestion points: File content changes retrieved via 'git diff' and 'git diff --cached' (SKILL.md). \n- Boundary markers: The skill does not define explicit delimiters to isolate repository content from its internal instructions. \n- Capability inventory: The agent has the capability to execute shell commands to modify the repository state based on the analysis (SKILL.md). \n- Sanitization: There is no evidence of sanitization or validation of the content being analyzed before it is processed by the agent.
Audit Metadata