finishing-a-development-branch

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local development commands such as pnpm test, pytest, and cargo test to verify code before merging. These are standard operations for development-oriented AI agents.
  • [COMMAND_EXECUTION]: Extensive use of Git commands (git merge, git push, git worktree remove) and GitHub CLI (gh pr create) to manage the repository state. All operations are within the expected scope of branch management.
  • [SAFE]: Destructive actions, such as discarding a branch and its associated commits, are protected by a manual confirmation requirement where the user must explicitly type 'discard'.
  • [SAFE]: The skill includes logic to detect the environment (e.g., distinguishing between a standard repository and a worktree) to ensure cleanup operations only affect directories created by the tool itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 02:36 AM
Security Audit — agent-trust-hub — finishing-a-development-branch