finishing-a-development-branch

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard git commands (rev-parse, checkout, pull, merge, push, worktree) and common test runners (npm, cargo, pytest, go test) to manage development workflows. All commands are routine for a version control assistant and are executed within the user's project context.
  • [PROMPT_INJECTION]: The skill includes instructions to strictly follow a confirmation flow ('discard') before deleting work, which is a safety best practice to prevent accidental data loss. It does not contain instructions to bypass agent safety filters.
  • [DATA_EXFILTRATION]: While the skill performs 'git push' operations, these are part of the intended primary purpose of the skill (pushing code to a remote repository) and are directed at the project's configured 'origin' remote.
  • [PRIVILEGE_ESCALATION]: No privilege escalation attempts were found. The skill operates within the user's standard git workspace permissions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 03:59 AM
Security Audit — agent-trust-hub — finishing-a-development-branch