git-shortcuts
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard git and GitHub CLI (
gh) commands to automate developer workflows. These includegit push,gh pr create,gh pr merge, andgit pull --ff-only. All execution is explicitly triggered by the user via--prefixed shorthands (e.g.,--cp,--pr). - [COMMAND_EXECUTION]: The skill executes repository-local scripts if present, specifically
scripts/teardown.shandscripts/worktree-remove.shwhen performing worktree cleanup via--close. It correctly validates these scripts exist before execution and provides a template for the user to set them up securely if missing. - [COMMAND_EXECUTION]: The skill performs environment checks using
git ls-remoteandgit symbolic-refto determine branch structures (e.g., detecting if astagingbranch exists) to ensure the correct workflow is applied to the specific repository. - [DATA_EXPOSURE]: The skill accesses the
.envfile to check for or storeSLACK_USER_ID. This is a standard practice for personalizing notifications and the skill explicitly asks for user permission before writing to the file.
Audit Metadata