rebase
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard git commands (fetch, rebase, stash, rev-parse) and a local helper script to manage repository state. All commands are scoped to the intended functionality of branch management.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations via
git fetch originto synchronize the local environment with the remote repository. This is a standard operation for git-based developer tools. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing branch names from the local environment. \n
- Ingestion points: Branch names retrieved from
git rev-parseand the output of thedetect-base-branch.shscript. \n - Boundary markers: None present; branch names are interpolated directly into shell commands. \n
- Capability inventory: Shell command execution, repository modification, and network access. \n
- Sanitization: No explicit validation of branch name strings is performed, assuming the local git environment and helper scripts provide safe values.
Audit Metadata