worktree-rebase-merge
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a wide range of Git commands to manage development workflows, including
git rebase,git merge,git switch, andgit worktreeoperations. It also creates temporary worktrees in system temporary directories to perform merges. - [INDIRECT_PROMPT_INJECTION]: The skill processes repository data which can be influenced by untrusted external inputs, creating a surface for indirect prompt injection. 1. Ingestion points: The skill reads
staged diff,unstaged diff, andgit loghistory to infer branch names and commit messages (SKILL.md). 2. Boundary markers: No specific delimitation or 'ignore' instructions are documented for when these diffs are interpolated into the agent's context. 3. Capability inventory: The skill has the ability to modify the repository and file system throughgit commit,git rebase,git merge, andgit switch(SKILL.md). 4. Sanitization: The skill employsgit check-ref-formatto validate candidate branch names before creation, providing a layer of validation against malicious branch naming.
Audit Metadata