prune-branches

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows a 'Manual Invocation Only' principle, ensuring that no actions, especially deletions, are performed without explicit human request and confirmation.
  • [SAFE]: Implements comprehensive branch protection that aggregates data from multiple sources (Forge APIs, local worktree, fallbacks, and user config) to ensure critical branches are never targeted.
  • [SAFE]: Mitigates Indirect Prompt Injection (Category 8) by providing clear instructions to the agent to treat third-party text, such as PR titles or code comments, strictly as data and to disregard any instructions or commands embedded within them.
  • [SAFE]: The skill enforces a 'Plans First' transparency model, presenting the user with clear evidence (SHAs, PR numbers, committer dates) for each branch before asking for approval.
  • [SAFE]: Uses a least-privilege approach by restricting allowed tools to a specific set of read-only and local git commands, while explicitly requiring user intervention for remote write operations like 'git push'.
  • [SAFE]: Includes robust recovery instructions in the documentation, such as recording tip SHAs to allow users to restore deleted branches if necessary.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 03:16 PM
Security Audit — agent-trust-hub — prune-branches