worktree-rebase-merge

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a wide range of Git commands to manage development workflows, including git rebase, git merge, git switch, and git worktree operations. It also creates temporary worktrees in system temporary directories to perform merges.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes repository data which can be influenced by untrusted external inputs, creating a surface for indirect prompt injection. 1. Ingestion points: The skill reads staged diff, unstaged diff, and git log history to infer branch names and commit messages (SKILL.md). 2. Boundary markers: No specific delimitation or 'ignore' instructions are documented for when these diffs are interpolated into the agent's context. 3. Capability inventory: The skill has the ability to modify the repository and file system through git commit, git rebase, git merge, and git switch (SKILL.md). 4. Sanitization: The skill employs git check-ref-format to validate candidate branch names before creation, providing a layer of validation against malicious branch naming.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 01:50 PM
Security Audit — agent-trust-hub — worktree-rebase-merge