finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local test suites (e.g.,
npm test,cargo test,go test) and Git commands to manage branch lifecycles. These are legitimate operations for a development-focused skill. - [COMMAND_EXECUTION]: It uses the GitHub CLI (
gh) to create Pull Requests. The shell command for generating the PR body uses a quoted heredoc ('EOF'), which is a security best practice to prevent shell expansion of the content. - [SAFE]: The skill includes safety guardrails, such as mandatory test verification before allowing merges or Pull Requests, and an explicit confirmation requirement ('discard') before deleting work.
Audit Metadata