git-branching-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides various standard Git commands (fetch, checkout, rebase, branch, push, clean) for managing development workflows. These are routine operations within a version control context.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a naming convention where user-provided task identifiers and slugs are used to create branch names, creating a potential injection surface. 1. Ingestion points: Task identifiers and issue descriptions provided by the user or project manager. 2. Boundary markers: The skill instructs the agent to use dedicated branches and avoid direct modifications to base branches. 3. Capability inventory: The agent is tasked with executing shell commands for branch management and cleanup. 4. Sanitization: Documentation explicitly advises against including special characters, underscores, or slashes within the branch name slugs to prevent naming errors or unintended behavior.
Audit Metadata